mod_auth_openid
mod_auth_openid copied to clipboard
OpenID Assertions received via HTTP Post are not processed properly.
mod_auth_openid appears to be looking for it's own nonce parameter (which is not conveyed as any recognizable openId extension) in the POST parameters. This is easily rectified by combining the GET and POST parameters @ http_helpers.cpp line 323:
query += "&";
query += r->args;