Releases for OpenID Provider

Release notes

This is yet another bugfix release! Onwards to the real 1.0 :)

* 7bf6040 - by David_Rothstein: properly sign nickname and email since we send them out in auth_response (#1441586: SREG and AX keys aren't signed, so they are ignored by Drupal OpenID clients)
* cfb8c4f - Revert "remove unused unsolicited assertion code" (#1471324: Missing openid_provider_authentication_response() function)
* b4237ca - optimization: delete stale associations in cron
* fd79f33 - fix association verification
* 36e6958 - remove unused unsolicited assertion code
* 26473eb - fix warnings in authentication_response()
* 1cd7b1b - complete the private association support (#506530: Private association support)

Release notes

With this release we complete the checkid_immediate implementation and perform further code cleanup. With this release, there remains no TODOs directly in the code (although some things are still missing, according to the README).

* fix warnings in PHP 5.3 and login problems (reported in #1421536: Module is broken at install)
* generate a association handle if it's invalid, to follow the standard
* finish the checkid_immediate implementation by returning an error if we need to prompt the user
* handle properly the case where we do not supported the requested association type

Release notes

Automatically built snapshot.

Release notes

I think we are ready for a release candidate. This module now works on all RP I can try and I have cleaned up the code significantly.

There are still some bits that are not complete in our implementation, most notably #506530: Private association support, #334876: Associate requests using 1.x or compatibility mode fail, #1158436: perform security audit and #1419020: Cannot login to Slashdot.

We have also some patches waiting in the queue, but since I have done so much work to improve the compatibility of this module over the years, I think it's now ready to mature to a 1.0 state.

Please, test the heck out of this.

Release notes

More bugfixes!

* #1234214: bccomp error if the gmp library is installed
* #1419910: fails to login on redmine

Some code cleanup was also performed.

Release notes

Give up on redmine and fix logins on stackoverflow, which seems to be following the standards: #831162: cannot login on stackoverflow or dotnetopenid sites

Release notes

This is a bugfix release before I cleanup the mess the branching has become here (see ]#1418232: merge master branch into 6.x-1.x).

It features the following commits:

* b3276ea - first pass at unit tests for this module (7 months ago)
* 2b7d8cc - #1158356: can't login to ikiwiki.info (perl's Net-OpenID-Consumer?) fix authentication against Net::OpenID::Consumer perl library (7 months ago)
* cce2995 - #1197574: Notices for unused dh_modulus, dh_gen and dh_consumer_public by Gábor Hojtsy - remove warning-triggering unused variables (7 months ago)
* ff58786 - use proper 1.0 redirect in authentication errors too (8 months ago)
* c024d0c - fix debug message to correctly state we redirect using 1.0 (8 months ago)
* de38d5a - format dumps in (8 months ago)

Release notes

Changes since DRUPAL-6--1-0-BETA1:

• #621956 by alex_b, yhahn | nilsja, xqus: Fixed Redirecting fails when not logged in on the provider site.
• #861016 by jmiccolis | roderik: Fixed Prevent urls from getting language treatment.
• #810784 by Jose Reyero: Fixed Slow association (15 secs timeout), missing http headers in response.
• #867390 by yhahn: Added Add permission check for OpenID sites local task access.