verifyAssertion always returning 404 error why?

[Partica Cristian]

I can't seem to verify the Assertion in the Google Identity Toolkit

http://code.google.com/apis/identitytoolkit/v1/reference.html

I'm using php and curl to post the json as specified..

I can't seem to view where the error is...

I get a 404 as a response Not Found in the body

basically I need the response to get the email, full name, picture, etc...

on the callback url i receive:

on GET

Array

(

    [route] => account/callback

    [rp_target] => callback

    [rp_purpose] => signin

    [gx_rp_st] => AEp4C1t7VW9jZVw63cN6W_8_laKquaddGrUGnMCTsvIKaz0_C4fVY5qG_M3T51QZI5ghXyyvvZ_LmeKaQbqoKmGBoYVnJbH96KrcKhRhmXKyYIskaMIRLXlXvosywPHX_piPMOCQ-V__

)

**on the POST** 

Array

(

    [requestUri] => http://mydomainhidden/gittest/index.php?route=account/callback&rp_target=callback&rp_purpose=signin&gx.rp_st=AEp4C1t7VW9jZVw63cN6W_8_laKquaddGrUGnMCTsvIKaz0_C4fVY5qG_M3T51QZI5ghXyyvvZ_LmeKaQbqoKmGBoYVnJbH96KrcKhRhmXKyYIskaMIRLXlXvosywPHX_piPMOCQ-V__

    [postBody] => openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.mode=id_res&openid.op_endpoint=https%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fud&openid.response_nonce=2011-09-21T09%3A53%3A02ZAfUtVZWCXFyLzA&openid.return_to=http%3A%2F%2Fmydomainhidden%2Fgittest%2Findex.php%3Froute%3Daccount%2Fcallback%26rp_target%3Dcallback%26rp_purpose%3Dsignin%26gx.rp_st%3DAEp4C1t7VW9jZVw63cN6W_8_laKquaddGrUGnMCTsvIKaz0_C4fVY5qG_M3T51QZI5ghXyyvvZ_LmeKaQbqoKmGBoYVnJbH96KrcKhRhmXKyYIskaMIRLXlXvosywPHX_piPMOCQ-V__&openid.assoc_handle=AOQobUd7PBIduJwDW_rxh7m-fIeXUTFRMVm6c0IXGSfDrrxmopi_l3Mj&openid.signed=op_endpoint%2Cclaimed_id%2Cidentity%2Creturn_to%2Cresponse_nonce%2Cassoc_handle%2Cns.ext1%2Cext1.mode%2Cext1.type.attr3%2Cext1.value.attr3%2Cext1.type.auto2%2Cext1.value.auto2%2Cext1.type.attr0%2Cext1.value.attr0%2Cext1.type.attr9%2Cext1.value.attr9%2Cext1.type.attr6%2Cext1.value.attr6&openid.sig=gzk1xEUh9%2FnZy4G7Nao6Ybhd1HQ%3D&openid.identity=https%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fid%3Fid%3DAItOawn06puTTx9gCLyaaMeeJVwl3fTW3ZjP704&openid.claimed_id=https%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fid%3Fid%3DAItOawn06puTTx9gCLyaaMeeJVwl3fTW3ZjP704&openid.ns.ext1=http%3A%2F%2Fopenid.net%2Fsrv%2Fax%2F1.0&openid.ext1.mode=fetch_response&openid.ext1.type.attr3=http%3A%2F%2Faxschema.org%2FnamePerson%2Ffirst&openid.ext1.value.attr3=MyNameHidden&openid.ext1.type.auto2=http%3A%2F%2Fwww.google.com%2Faccounts%2Fapi%2Ffederated-login%2Fid&openid.ext1.value.auto2=116912999125904623003&openid.ext1.type.attr0=http%3A%2F%2Faxschema.org%2Fcontact%2Femail&openid.ext1.value.attr0=hidden%40email.com&openid.ext1.type.attr9=http%3A%2F%2Faxschema.org%2Fpref%2Flanguage&openid.ext1.value.attr9=en&openid.ext1.type.attr6=http%3A%2F%2Faxschema.org%2FnamePerson%2Flast&openid.ext1.value.attr6=MyLastNameHidden

)

**so I compose this to an array** 

{

  "requestUri": requestUri,

  "postBody": postBody,

}

**posted to https://www.googleapis.com/identitytoolkit/v1/relyingparty/verifyAssertionkey=MYAPIKEY**

**resulting** 

{"requestUri":"http:\/\/mydomainhidden\/gittest\/index.php?route=account\/callback&rp_target=callback&rp_purpose=signin&gx.rp_st=AEp4C1t7VW9jZVw63cN6W_8_laKquaddGrUGnMCTsvIKaz0_C4fVY5qG_M3T51QZI5ghXyyvvZ_LmeKaQbqoKmGBoYVnJbH96KrcKhRhmXKyYIskaMIRLXlXvosywPHX_piPMOCQ-V__","postBody":"openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.mode=id_res&openid.op_endpoint=https%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fud&openid.response_nonce=2011-09-21T09%3A53%3A02ZAfUtVZWCXFyLzA&openid.return_to=http%3A%2F%2Fmydomainhidden%2Fgittest%2Findex.php%3Froute%3Daccount%2Fcallback%26rp_target%3Dcallback%26rp_purpose%3Dsignin%26gx.rp_st%3DAEp4C1t7VW9jZVw63cN6W_8_laKquaddGrUGnMCTsvIKaz0_C4fVY5qG_M3T51QZI5ghXyyvvZ_LmeKaQbqoKmGBoYVnJbH96KrcKhRhmXKyYIskaMIRLXlXvosywPHX_piPMOCQ-V__&openid.assoc_handle=AOQobUd7PBIduJwDW_rxh7m-fIeXUTFRMVm6c0IXGSfDrrxmopi_l3Mj&openid.signed=op_endpoint%2Cclaimed_id%2Cidentity%2Creturn_to%2Cresponse_nonce%2Cassoc_handle%2Cns.ext1%2Cext1.mode%2Cext1.type.attr3%2Cext1.value.attr3%2Cext1.type.auto2%2Cext1.value.auto2%2Cext1.type.attr0%2Cext1.value.attr0%2Cext1.type.attr9%2Cext1.value.attr9%2Cext1.type.attr6%2Cext1.value.attr6&openid.sig=gzk1xEUh9%2FnZy4G7Nao6Ybhd1HQ%3D&openid.identity=https%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fid%3Fid%3DAItOawn06puTTx9gCLyaaMeeJVwl3fTW3ZjP704&openid.claimed_id=https%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fid%3Fid%3DAItOawn06puTTx9gCLyaaMeeJVwl3fTW3ZjP704&openid.ns.ext1=http%3A%2F%2Fopenid.net%2Fsrv%2Fax%2F1.0&openid.ext1.mode=fetch_response&openid.ext1.type.attr3=http%3A%2F%2Faxschema.org%2FnamePerson%2Ffirst&openid.ext1.value.attr3=MyNameHidden&openid.ext1.type.auto2=http%3A%2F%2Fwww.google.com%2Faccounts%2Fapi%2Ffederated-login%2Fid&openid.ext1.value.auto2=116912999125904623003&openid.ext1.type.attr0=http%3A%2F%2Faxschema.org%2Fcontact%2Femail&openid.ext1.value.attr0=hidden%40email.com&openid.ext1.type.attr9=http%3A%2F%2Faxschema.org%2Fpref%2Flanguage&openid.ext1.value.attr9=en&openid.ext1.type.attr6=http%3A%2F%2Faxschema.org%2FnamePerson%2Flast&openid.ext1.value.attr6=MyLastNameHidden"}

Can anyone help me?

[Partica Cristian]

PS, I used the EasyRpService class in PHP to obtain this..

  $url = EasyRpService::getCurrentUrl();

  $postData = @file_get_contents('php://input');

  $result = EasyRpService::verify($url, $postData);

[Jin Liu]

> **posted to https://www.googleapis.com/identitytoolkit/v1/relyingparty/verifyAssertionkey=MYAPIKEY**

If above is the actual request, a '?' is missing - the correct url should be .../verifyAssertion?key=...

[Partica Cristian]

yess! :) that was the problem. sometimes is hard to see those little critters

thank you