Comments (3)
21 aug 2015 kl. 18:38 skrev Gijutsu [email protected]:
For testing purposes, I am doing the Implicit Flow w/o the intermediary browser, instead copy/pasting responses query strings into an interactive session. On top of that, none of the RP or OP are using SSL as of now, which is to be added later in the implementation process.
As this is highly insecure, I expected the lib to throw an error – as it does:
/oic/utils/keyio.pyc in get(self, use, key_type, issuer, kid, **kwargs)
418 _keys = []
419 else:
--> 420 _keys = self.issuer_keys[issuer]
421
422 lst = []Exception AttributeError: "'NoneType' object has no attribute 'path'" in <function _remove at 0x10063daa0> ignored
But due to this quite cryptic Exception I am unsure if this is related to the lack of SSL keys in the KeyJar. Or something else.
Agree that the exception is cryptic, it must be constructed by a function higher up in the chain.
Since I can’t see the chain of calls I don’t know which one is the culprit.
Check in an update that allows no issuer keys.
— Roland
'Look, that's why there's rules, understand? So that you think before you break ’em.’ - Terry Pratchett
from pyoidc.
Check in an update that allows no issuer keys.
I should PR? Would do. With the project I'm working on I had to manually disable verification of tokens and also ran into problems with urllib2 not providing a SNI and thus failing with ssl23_get_server_hello unknown protocol
. The former directly concerns pyoidc, because although the spec says always to verify, you clearly designed it to be a kwarg.
from pyoidc.
2 sep 2015 kl. 10:23 skrev Paul Solbach [email protected]:
Check in an update that allows no issuer keys.
I should PR? Would do.
Please do !
With the project I'm working on I had to manually disable verification of tokens and also ran into problems with urllib2 not providing a SNI and thus failing with ssl23_get_server_hello unknown protocol. The former directly concerns pyoidc, because although the spec says always to verify, you clearly designed it to be a kwarg.
Well, that is because being the maintainer of the OIDC test tool and often finding myself in a
situation where I need to debug what people are doing. I needed a toolbox that allows me to do
un-standard things.
— Roland
'Look, that's why there's rules, understand? So that you think before you break ’em.’ - Terry Pratchett
from pyoidc.
Related Issues (20)
- Document release process / pypi upload HOT 2
- Create python 3.11 compatible release for pypi HOT 2
- Client.request_and_return no longer works with NoneResponse HOT 5
- Update conda-forge packages HOT 1
- Update URL references after repo move HOT 2
- AttributeError: 'dict' object has no attribute 'create_cookie' HOT 3
- Allow using different authn_method in Consumer.complete()
- Consumer.backchannel_logout and handling state HOT 11
- Architecture question regardings multiple app instances HOT 3
- Cannot add `scope` to registration request HOT 5
- Release 1.5.1 HOT 4
- Investigate failing readthedocs.io build HOT 1
- pydantic 2 seems to be incompatible with oic currently HOT 1
- Now in seconds vs. milliseconds: IATError: Issued in the future HOT 2
- Multiple matching kid support HOT 1
- Add support for RFC 9207 (?) HOT 1
- Why does `Client.do_access_token_refresh` require `state`? HOT 2
- Use SLSA workflow to create releases for PyPi HOT 1
- Client.parse_response misinterprets success as failure HOT 4
- Fix mypy
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pyoidc.