Opened 3 years ago

Closed 2 years ago

#4727 closed Question/How do I...? (fixed)

OpenID Login errors

Reported by: https://id.mayfirst.org/abh Owned by: https://id.mayfirst.org/dkg
Priority: Medium Component: Tech
Keywords: openid Cc:
Sensitive: no

Description

I'm not even sure whether this is an issue with Mayfirst or StackExchange, but I get this when I try to use my Mayfirst OpenId to log in to StackExchange (previously, I've been able to log in just fine).

Unable to log in with your OpenID provider:

The openid.return_to parameter (http://android.stackexchange.com/users/authenticate/?s=13cffdbc-b428-4f60-972a-b60b5670ffb0&dnoa.userSuppliedIdentifier=https://id.mayfirst.org/abh) does not match the actual URL (http://android.stackexchange.com/users/authenticate/?s=13cffdbc-b428-4f60-972a-b60b5670ffb0&dnoa.userSuppliedIdentifier=https://id.mayfirst.org/abh&openid.ns=http://specs.openid.net/auth/2.0&openid.mode=id_res&openid.op_endpoint=https://id.mayfirst.org/openid/provider&openid.identity=https://id.mayfirst.org/abh&openid.claimed_id=https://id.mayfirst.org/abh&openid.return_to=http://android.stackexchange.com/users/authenticate/?s=13cffdbc-b428-4f60-972a-b60b5670ffb0&dnoa.userSuppliedIdentifier=https%253A%252F%252Fid.mayfirst.org%252Fabh&openid.response_nonce=2011-10-13T12:19:04ZYGDQ&openid.assoc_handle=2011-10-13T12:19:04ZXMZL&openid.sreg.nickname=abh&openid.sreg.email=&s=13cffdbc-b428-4f60-972a-b60b5670ffb0&dnoa.userSuppliedIdentifier=https://id.mayfirst.org/abh&openid.signed=op_endpoint,return_to,response_nonce,assoc_handle,identity,claimed_id&openid.sig=srSODtepmZCagiUspmTKvzuIBPY=) the request was made with.

Change History (9)

comment:1 follow-up: Changed 3 years ago by https://id.mayfirst.org/dkg

when was the last time you were able to successfully log into stack exchange with the mfpl openid?

On August 11th, mf/pl switched OpenID provider codebases -- if you've logged in to stackexchange successfully since then, the debugging process would be pretty different than if your success was only prior to August 11th.

comment:2 in reply to: ↑ 1 Changed 2 years ago by https://id.mayfirst.org/abh

Replying to https://id.mayfirst.org/dkg: I'm a cookie keeper, so I don't actually know when I last logged in. It could easily have been before August 11.

comment:3 Changed 2 years ago by https://id.mayfirst.org/jackaponte

I also experienced an authentication error when using my MFPL OpenID to log into a site, this time Doodle. Unfortunately Doodle didn't provide very helpful information on the error; here's the error message:

Third-party login error

    THIRD-PARTY LOGIN FAILED (UNKNOWN ERROR)

And the entire URL in case that gives hints:

https://www.doodle.com/mydoodle/thirdpartylogin/error.html?openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.mode=id_res&openid.op_endpoint=https%3A%2F%2Fid.mayfirst.org%2Fopenid%2Fprovider&openid.identity=https%3A%2F%2Fid.mayfirst.org%2Fjackaponte&openid.claimed_id=https%3A%2F%2Fid.mayfirst.org%2Fjackaponte&openid.return_to=http%3A%2F%2Fdoodle.com%2Fnp%2Fmydoodle%2Fthirdparty%2FopenIdAuth&openid.response_nonce=XXXXXXX&openid.assoc_handle=YYYYYY&openid.sreg.nickname=jackaponte&openid.sreg.email=&openid.signed=op_endpoint%2Creturn_to%2Cresponse_nonce%2Cassoc_handle%2Cidentity%2Cclaimed_id&openid.sig=ZZZZZZZZZZZZ

comment:4 follow-up: Changed 2 years ago by https://id.mayfirst.org/dkg

Jack, the nonce values in the URL above are things that you probably don't want to share, since someone with knowledge of the nonce and control over some access to the network at the target site could impersonate you with that information.

comment:5 in reply to: ↑ 4 Changed 2 years ago by https://id.mayfirst.org/jackaponte

Gotcha and good to know, dkg. Unfortunately I can't edit my comment but if you can and have time to remove that information, please do!

comment:6 Changed 2 years ago by https://id.mayfirst.org/dkg

I've just anonymized the nonce and the handle and the sig for good measure.

comment:7 Changed 2 years ago by https://id.mayfirst.org/ross

  • Owner set to https://id.mayfirst.org/dkg
  • Status changed from new to assigned

comment:8 Changed 2 years ago by https://id.mayfirst.org/ross

  • Resolution set to fixed
  • Status changed from assigned to feedback

comment:9 Changed 2 years ago by automatic

  • Status changed from feedback to closed

No news is good news (we hope)! Given the lack of feedback, we think this ticket can be closed.

Please login to add comments to this ticket.

Note: See TracTickets for help on using tickets.