OpenIdException: Missing 'openid.sig'

[Hristo Oskov]

So I'm using this library and following everything according to the
'Quickstart' on the project page: http://code.google.com/p/jopenid/wiki/QuickStart

I'm getting an error:

org.expressme.openid.OpenIdException: Missing 'openid.sig'.
at org.expressme.openid.OpenIdManager.getAuthentication
(OpenIdManager.java:95)
at org.expressme.openid.OpenIdManager.getAuthentication
(OpenIdManager.java:80)

Since I'm letting the library do all the work, I don't have much
control over how the authentication request URL is created but my code
fails at this line:

Authentication authentication = manager.getAuthentication(request,
association.getRawMacKey());

I looked at the code for OpenIdManager.java and there is no
'openid.sig' appended at all when the URL is being appended but there
is a check for it in getAuthentication().

Any ideas as to how to fix this? I'm not sure what openid.sig
represents or how to create it and it seems that the URL that is
created without the openid.sig parameter works.

Thanks,
Hristo

[ramesh]

I am also facing same problem .Can anyone explain what are the steps
we need to follow .

[Michael Liao]

openid.sig was sent from op (e.g. google), plz see the complete sample code:

http://jopenid.googlecode.com/files/sample.zip

--
 Best regards,

Michael Liao

[ramesh chiluveri]

Hai,

Thanks for your quick response.

I am having problem to integrate Windows Openid in my site.

Can you please tell me ,what is endpoint for windows like google we me mentioned in openid.properties.

thanks

[Eser Utku]

Just to be a bit more clear here: I have experienced the same problem and the mistake I made was copying the wrong URL as the answer from OpenID provider. I have accidentally copied the URL given in the example (which you are supposed to copy to the browser address bar to get authenticated) as the answer URL to getLine(). This https string doesn't obviously have the openid.sig parameter but the redirect URL from Google (shown in the example in address bar of the browser - last picture) does have it. Cut a long story short:

Copy the output of the follwong line to your browser's address bar: System.out.println("Copy the authentication URL in browser:\n" + url); (which does *not* have openid.sig)

After getting the approval from you Google will redirect to the returnUrl - which doesn't exist so you cannot connect to it and get something similar to the final picture given in the example

Copy the contents of the address bar (which *has* openid.sig) at this point and give it to the application (which is waiting for you due to String ret = readLine(); line)