org.openid4java.message.MessageException: 0x100: Required parameter missing: openid.mode

616 views
Skip to first unread message

asianCoolz

unread,
Jun 28, 2009, 12:02:22 PM6/28/09
to OpenID4Java
i wrote openidservlet and when doing post ,i get below error, i
already read existing post by grabbing openid4java from svn and
recompile. but that doesnt solve the problem. i'm using the latest
version of openid4java .my sevlet code is at http://pastebin.com/m77e5df2e


Created empty parameter list.
Created empty parameter list.
Could not send message:
org.openid4java.message.MessageException: 0x100: Required parameter
missing: openid.mode
at org.openid4java.message.Message.validate(Message.java:188)
at org.openid4java.message.AuthSuccess.validate(AuthSuccess.java:400)
at org.openid4java.message.AuthSuccess.createAuthSuccess
(AuthSuccess.java:117)
at org.openid4java.consumer.ConsumerManager.verify
(ConsumerManager.java:1146)
at com.teoh.server.OpenIDServlet.doPost(OpenIDServlet.java:285)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:
487)
at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter
(ServletHandler.java:1097)
at org.springframework.security.util.FilterChainProxy
$VirtualFilterChain.doFilter(FilterChainProxy.java:378)
at
org.springframework.security.intercept.web.FilterSecurityInterceptor.invoke
(FilterSecurityInterceptor.java:109)
at
org.springframework.security.intercept.web.FilterSecurityInterceptor.doFilter
(FilterSecurityInterceptor.java:83)
at org.springframework.security.util.FilterChainProxy
$VirtualFilterChain.doFilter(FilterChainProxy.java:390)
at
org.springframework.security.ui.SessionFixationProtectionFilter.doFilterHttp
(SessionFixationProtectionFilter.java:67)
at org.springframework.security.ui.SpringSecurityFilter.doFilter
(SpringSecurityFilter.java:53)
at org.springframework.security.util.FilterChainProxy
$VirtualFilterChain.doFilter(FilterChainProxy.java:390)
at
org.springframework.security.ui.ExceptionTranslationFilter.doFilterHttp
(ExceptionTranslationFilter.java:101)
at org.springframework.security.ui.SpringSecurityFilter.doFilter
(SpringSecurityFilter.java:53)
at org.springframework.security.util.FilterChainProxy
$VirtualFilterChain.doFilter(FilterChainProxy.java:390)
at
org.springframework.security.wrapper.SecurityContextHolderAwareRequestFilter.doFilterHttp
(SecurityContextHolderAwareRequestFilter.java:91)
at org.springframework.security.ui.SpringSecurityFilter.doFilter
(SpringSecurityFilter.java:53)
at org.springframework.security.util.FilterChainProxy
$VirtualFilterChain.doFilter(FilterChainProxy.java:390)
at
org.springframework.security.context.HttpSessionContextIntegrationFilter.doFilterHttp
(HttpSessionContextIntegrationFilter.java:235)
at org.springframework.security.ui.SpringSecurityFilter.doFilter
(SpringSecurityFilter.java:53)
at org.springframework.security.util.FilterChainProxy
$VirtualFilterChain.doFilter(FilterChainProxy.java:390)
at org.springframework.security.util.FilterChainProxy.doFilter
(FilterChainProxy.java:175)
at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate
(DelegatingFilterProxy.java:238)
at org.springframework.web.filter.DelegatingFilterProxy.doFilter
(DelegatingFilterProxy.java:168)
at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter
(ServletHandler.java:1088)
at org.mortbay.jetty.servlet.ServletHandler.handle
(ServletHandler.java:360)
at org.mortbay.jetty.security.SecurityHandler.handle
(SecurityHandler.java:216)
at org.mortbay.jetty.servlet.SessionHandler.handle
(SessionHandler.java:181)
at org.mortbay.jetty.handler.ContextHandler.handle
(ContextHandler.java:729)
at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:
405)
at org.mortbay.jetty.handler.HandlerWrapper.handle
(HandlerWrapper.java:152)
at org.mortbay.jetty.handler.RequestLogHandler.handle
(RequestLogHandler.java:49)
at org.mortbay.jetty.handler.HandlerWrapper.handle
(HandlerWrapper.java:152)
at org.mortbay.jetty.Server.handle(Server.java:324)
at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:
505)
at org.mortbay.jetty.HttpConnection$RequestHandler.content
(HttpConnection.java:843)
at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:647)
at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:211)
at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:380)
at org.mortbay.io.nio.SelectChannelEndPoint.run
(SelectChannelEndPoint.java:395)
at org.mortbay.thread.QueuedThreadPool$PoolThread.run
(QueuedThreadPool.java:488)
Message has been deleted

Johnny Bufu

unread,
Jun 29, 2009, 2:12:54 AM6/29/09
to openi...@googlegroups.com
Try enabling debug logs - they will show in greater detail what is
happening and what leads to the openid.mode-less message.

http://code.google.com/p/openid4java/wiki/LoggingConfiguration

Johnny

Gmail User

unread,
Jun 30, 2009, 1:58:23 AM6/30/09
to OpenID4Java
...
> Try enabling debug logs - they will show in greater detail what is
...


OK, I did that, but all of this log below is only gibberish to me.
Perhaps someone else can tell me more about what it means? It seems
that the relevant part is in the last 50 lines or so, but then I may
be wrong so I included it all.

Again,

--domain is replaced with "domain.tld";

-- "login_with:aol" mentioned near the end is in fact a parameter I
use to call the page .../openid.jsp?login_with=aol. My thought was to
have a preset collection of openid logins that I can identify from
user selection and select a hardcoded endpoint (I do realize that
openid4java attempts to find them on its own);

--"Setting checkid_immediate auth request." is a piece of code I added
inside SampleConsumer to set the mode ( as an experiment). Remember,
that this addition did not change the error I am getting.


Log:

Resource /openid4java.properties not found.
Resource /openid4java.properties not found.
discovery.html.parser:org.openid4java.discovery.html.CyberNekoDOMHtmlParser
discovery.html.parser:org.openid4java.discovery.html.CyberNekoDOMHtmlParser
discovery.yadis.html.parser:org.openid4java.discovery.yadis.CyberNekoDOMYadisHtmlParser
discovery.yadis.html.parser:org.openid4java.discovery.yadis.CyberNekoDOMYadisHtmlParser
discovery.xrds.parser:org.openid4java.discovery.xrds.XrdsParserImpl
discovery.xrds.parser:org.openid4java.discovery.xrds.XrdsParserImpl
discovery.xri.resolver:org.openid4java.discovery.xri.XriDotNetProxyResolver
discovery.xri.resolver:org.openid4java.discovery.xri.XriDotNetProxyResolver
discovery.xrds.parser:org.openid4java.discovery.xrds.XrdsParserImpl
discovery.xrds.parser:org.openid4java.discovery.xrds.XrdsParserImpl
RP discovery / realm validation disabled;
RP discovery / realm validation disabled;
RP discovery / realm validation disabled;
RP discovery / realm validation disabled;
http://www.domain.tld/openid.jsp
Creating URL identifier for: http://openid.aol.com
Creating URL identifier for: http://openid.aol.com
Normalized: http://openid.aol.com to: http://openid.aol.com/
Normalized: http://openid.aol.com to: http://openid.aol.com/
Starting discovery on URL identifier: http://openid.aol.com/
Starting discovery on URL identifier: http://openid.aol.com/
Performing HTTP HEAD on: http://openid.aol.com/ ...
Performing HTTP HEAD on: http://openid.aol.com/ ...
Performing HTTP GET on: http://openid.aol.com/ ...
Performing HTTP GET on: http://openid.aol.com/ ...
Read 473 bytes.
Read 473 bytes.
document:
<HTML>
<HEAD>
<META http-equiv="Content-Type" content="text/html; charset=UTF-8">
<LINK href="https://api.screenname.aol.com/auth/openidServer"
rel="openid.server">
<META content="text/html; charset=UTF-8" http-equiv="Content-Type">
<TITLE>AOL OpenId</TITLE>
<META content="0;url=http://profiles.aim.com/" http-equiv="refresh">
</HEAD>
<BODY>If not redirected automatically, please click <A href="http://
profiles.aim.com/">here</A> to continue</BODY>
</HTML>

document:
<HTML>
<HEAD>
<META http-equiv="Content-Type" content="text/html; charset=UTF-8">
<LINK href="https://api.screenname.aol.com/auth/openidServer"
rel="openid.server">
<META content="text/html; charset=UTF-8" http-equiv="Content-Type">
<TITLE>AOL OpenId</TITLE>
<META content="0;url=http://profiles.aim.com/" http-equiv="refresh">
</HEAD>
<BODY>If not redirected automatically, please click <A href="http://
profiles.aim.com/">here</A> to continue</BODY>
</HTML>

input:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/
TR/html4/strict.dtd"><html><head><link rel="openid.server"
href="https://api.screenname.aol.com/auth/openidServer"/><meta http-
equiv="Content-Type" content="text/html; charset=UTF-8"><title>AOL
OpenId</title><meta http-equiv="refresh" content="0;url=http://
profiles.aim.com/"></head><body>If not redirected automatically,
please click <a href="http://profiles.aim.com/">here</a> to continue</
body></html>
input:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/
TR/html4/strict.dtd"><html><head><link rel="openid.server"
href="https://api.screenname.aol.com/auth/openidServer"/><meta http-
equiv="Content-Type" content="text/html; charset=UTF-8"><title>AOL
OpenId</title><meta http-equiv="refresh" content="0;url=http://
profiles.aim.com/"></head><body>If not redirected automatically,
please click <a href="http://profiles.aim.com/">here</a> to continue</
body></html>
xrdsLocation: null
xrdsLocation: null
Yadis discovered 0 endpoints from: http://openid.aol.com/
Yadis discovered 0 endpoints from: http://openid.aol.com/
No OpenID service endpoints discovered through Yadis; attempting HTML
discovery...
No OpenID service endpoints discovered through Yadis; attempting HTML
discovery...
Returning cached GET response for http://openid.aol.com/
Returning cached GET response for http://openid.aol.com/
Normalized: http://openid.aol.com/ to: http://openid.aol.com/
Normalized: http://openid.aol.com/ to: http://openid.aol.com/
Parsing HTML data:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/
TR/html4/strict.dtd"><html><head><link rel="openid.server"
href="https://api.screenname.aol.com/auth/openidServer"/><meta http-
equiv="Content-Type" content="text/html; charset=UTF-8"><title>AOL
OpenId</title><meta http-equiv="refresh" content="0;url=http://
profiles.aim.com/"></head><body>If not redirected automatically,
please click <a href="http://profiles.aim.com/">here</a> to continue</
body></html>
Parsing HTML data:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/
TR/html4/strict.dtd"><html><head><link rel="openid.server"
href="https://api.screenname.aol.com/auth/openidServer"/><meta http-
equiv="Content-Type" content="text/html; charset=UTF-8"><title>AOL
OpenId</title><meta http-equiv="refresh" content="0;url=http://
profiles.aim.com/"></head><body>If not redirected automatically,
please click <a href="http://profiles.aim.com/">here</a> to continue</
body></html>
Found OpenID1 endpoint: https://api.screenname.aol.com/auth/openidServer
Found OpenID1 endpoint: https://api.screenname.aol.com/auth/openidServer
HTML discovery result:
ClaimedID:http://openid.aol.com/
OpenID1-endpoint:https://api.screenname.aol.com/auth/openidServer
HTML discovery result:
ClaimedID:http://openid.aol.com/
OpenID1-endpoint:https://api.screenname.aol.com/auth/openidServer
HTML discovery completed on: http://openid.aol.com/
HTML discovery completed on: http://openid.aol.com/
OpenID1-signon HTML discovery endpoint: OpenID1
OP-endpoint:https://api.screenname.aol.com/auth/openidServer
ClaimedID:http://openid.aol.com/
Delegate:null
OpenID1-signon HTML discovery endpoint: OpenID1
OP-endpoint:https://api.screenname.aol.com/auth/openidServer
ClaimedID:http://openid.aol.com/
Delegate:null
Discovered 1 OpenID endpoints.
Discovered 1 OpenID endpoints.
Trying to associate with https://api.screenname.aol.com/auth/openidServer
attempts left: 4
Trying to associate with https://api.screenname.aol.com/auth/openidServer
attempts left: 4
Created empty parameter list.
Created empty parameter list.
Creating association request, type: :HMAC-SHA1:OpenID1DH session: null
Creating association request, type: :HMAC-SHA1:OpenID1DH session: null
Session:Association Type: :HMAC-SHA1:OpenID1
Session:Association Type: :HMAC-SHA1:OpenID1
Created association request:
openid.mode:associate
openid.session_type:
openid.assoc_type:HMAC-SHA1

Created association request:
openid.mode:associate
openid.session_type:
openid.assoc_type:HMAC-SHA1

Created DH session: DH-SHA1:HMAC-SHA1:OpenID1 base: 2 modulus:
155172898181473697471232257763715539915724801966915404479707795314057629378541917580651227423698188993727816152646631438561595825688188889951272158842675419950341258706556549803580104870537681476726513255747040765857479291291572334510643245094715007229621094194349783925984760375594985848253359305585439638443
Created DH session: DH-SHA1:HMAC-SHA1:OpenID1 base: 2 modulus:
155172898181473697471232257763715539915724801966915404479707795314057629378541917580651227423698188993727816152646631438561595825688188889951272158842675419950341258706556549803580104870537681476726513255747040765857479291291572334510643245094715007229621094194349783925984760375594985848253359305585439638443
Created empty parameter list.
Created empty parameter list.
Creating association request, type: DH-SHA1:HMAC-SHA1:OpenID1DH
session: DH-SHA1:HMAC-SHA1:OpenID1 base: 2 modulus:
155172898181473697471232257763715539915724801966915404479707795314057629378541917580651227423698188993727816152646631438561595825688188889951272158842675419950341258706556549803580104870537681476726513255747040765857479291291572334510643245094715007229621094194349783925984760375594985848253359305585439638443
Creating association request, type: DH-SHA1:HMAC-SHA1:OpenID1DH
session: DH-SHA1:HMAC-SHA1:OpenID1 base: 2 modulus:
155172898181473697471232257763715539915724801966915404479707795314057629378541917580651227423698188993727816152646631438561595825688188889951272158842675419950341258706556549803580104870537681476726513255747040765857479291291572334510643245094715007229621094194349783925984760375594985848253359305585439638443
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Created association request:
openid.mode:associate
openid.session_type:DH-SHA1
openid.assoc_type:HMAC-SHA1
openid.dh_consumer_public:Dhtg4VPQ+Yc/
qI7Y9wga0lBKEwTtNo50eVTSfHM6WsFZ0AORFvRVP/
zA82zBS8fzqtwDqb2N9cbwb7pb0RdCQhIUm9XTicnXJ/2rCnLPKV+Y/
9vx1Pliiqh3VWrXHVn0i1yTkiItVbt0Zu5ihqBhk0IysFlp79vG9fN2DHN2Imw=

Created association request:
openid.mode:associate
openid.session_type:DH-SHA1
openid.assoc_type:HMAC-SHA1
openid.dh_consumer_public:Dhtg4VPQ+Yc/
qI7Y9wga0lBKEwTtNo50eVTSfHM6WsFZ0AORFvRVP/
zA82zBS8fzqtwDqb2N9cbwb7pb0RdCQhIUm9XTicnXJ/2rCnLPKV+Y/
9vx1Pliiqh3VWrXHVn0i1yTkiItVbt0Zu5ihqBhk0IysFlp79vG9fN2DHN2Imw=

Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Trying association type: DH-SHA1:HMAC-SHA1:OpenID1
Trying association type: DH-SHA1:HMAC-SHA1:OpenID1
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Created empty parameter list.
Created empty parameter list.
Performing HTTP POST on https://api.screenname.aol.com/auth/openidServer
Performing HTTP POST on https://api.screenname.aol.com/auth/openidServer
Going to buffer response body of large or unknown size. Using
getResponseBodyAsStream instead is recommended.
Creating parameter list from key-value form:
assoc_type:HMAC-SHA1
assoc_handle:diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
expires_in:86399
session_type:DH-SHA1
dh_server_public:AIsxKZPSTcuibZSdbKP7CUTSjr9vJmKpXRSB81CEsM1Yq5JEr/
RB8YmMQwr9zwqBFbBSsWMtep
+SviGV5ivrp3s6CAuQXoCxDUNKxoZe3t8kb3Rp5KePtbFPMmIn6iHyow1bnXl/ar4Q
+FA3Ps+thl3NsuMQ3BJ/QG2tF97bB+yO
enc_mac_key:IN8kJ18dCYzYW+54wjh9dJKkqns=

Creating parameter list from key-value form:
assoc_type:HMAC-SHA1
assoc_handle:diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
expires_in:86399
session_type:DH-SHA1
dh_server_public:AIsxKZPSTcuibZSdbKP7CUTSjr9vJmKpXRSB81CEsM1Yq5JEr/
RB8YmMQwr9zwqBFbBSsWMtep
+SviGV5ivrp3s6CAuQXoCxDUNKxoZe3t8kb3Rp5KePtbFPMmIn6iHyow1bnXl/ar4Q
+FA3Ps+thl3NsuMQ3BJ/QG2tF97bB+yO
enc_mac_key:IN8kJ18dCYzYW+54wjh9dJKkqns=

Created empty parameter list.
Created empty parameter list.
Copying parameter list:
assoc_type:HMAC-SHA1
assoc_handle:diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
expires_in:86399
session_type:DH-SHA1
dh_server_public:AIsxKZPSTcuibZSdbKP7CUTSjr9vJmKpXRSB81CEsM1Yq5JEr/
RB8YmMQwr9zwqBFbBSsWMtep
+SviGV5ivrp3s6CAuQXoCxDUNKxoZe3t8kb3Rp5KePtbFPMmIn6iHyow1bnXl/ar4Q
+FA3Ps+thl3NsuMQ3BJ/QG2tF97bB+yO
enc_mac_key:IN8kJ18dCYzYW+54wjh9dJKkqns=

Copying parameter list:
assoc_type:HMAC-SHA1
assoc_handle:diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
expires_in:86399
session_type:DH-SHA1
dh_server_public:AIsxKZPSTcuibZSdbKP7CUTSjr9vJmKpXRSB81CEsM1Yq5JEr/
RB8YmMQwr9zwqBFbBSsWMtep
+SviGV5ivrp3s6CAuQXoCxDUNKxoZe3t8kb3Rp5KePtbFPMmIn6iHyow1bnXl/ar4Q
+FA3Ps+thl3NsuMQ3BJ/QG2tF97bB+yO
enc_mac_key:IN8kJ18dCYzYW+54wjh9dJKkqns=

Retrived response:
assoc_type:HMAC-SHA1
assoc_handle:diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
expires_in:86399
session_type:DH-SHA1
dh_server_public:AIsxKZPSTcuibZSdbKP7CUTSjr9vJmKpXRSB81CEsM1Yq5JEr/
RB8YmMQwr9zwqBFbBSsWMtep
+SviGV5ivrp3s6CAuQXoCxDUNKxoZe3t8kb3Rp5KePtbFPMmIn6iHyow1bnXl/ar4Q
+FA3Ps+thl3NsuMQ3BJ/QG2tF97bB+yO
enc_mac_key:IN8kJ18dCYzYW+54wjh9dJKkqns=

Retrived response:
assoc_type:HMAC-SHA1
assoc_handle:diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
expires_in:86399
session_type:DH-SHA1
dh_server_public:AIsxKZPSTcuibZSdbKP7CUTSjr9vJmKpXRSB81CEsM1Yq5JEr/
RB8YmMQwr9zwqBFbBSsWMtep
+SviGV5ivrp3s6CAuQXoCxDUNKxoZe3t8kb3Rp5KePtbFPMmIn6iHyow1bnXl/ar4Q
+FA3Ps+thl3NsuMQ3BJ/QG2tF97bB+yO
enc_mac_key:IN8kJ18dCYzYW+54wjh9dJKkqns=

Created empty parameter list.
Created empty parameter list.
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Created association response from message parameters:
assoc_type:HMAC-SHA1
assoc_handle:diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
expires_in:86399
session_type:DH-SHA1
dh_server_public:AIsxKZPSTcuibZSdbKP7CUTSjr9vJmKpXRSB81CEsM1Yq5JEr/
RB8YmMQwr9zwqBFbBSsWMtep
+SviGV5ivrp3s6CAuQXoCxDUNKxoZe3t8kb3Rp5KePtbFPMmIn6iHyow1bnXl/ar4Q
+FA3Ps+thl3NsuMQ3BJ/QG2tF97bB+yO
enc_mac_key:IN8kJ18dCYzYW+54wjh9dJKkqns=

Created association response from message parameters:
assoc_type:HMAC-SHA1
assoc_handle:diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
expires_in:86399
session_type:DH-SHA1
dh_server_public:AIsxKZPSTcuibZSdbKP7CUTSjr9vJmKpXRSB81CEsM1Yq5JEr/
RB8YmMQwr9zwqBFbBSsWMtep
+SviGV5ivrp3s6CAuQXoCxDUNKxoZe3t8kb3Rp5KePtbFPMmIn6iHyow1bnXl/ar4Q
+FA3Ps+thl3NsuMQ3BJ/QG2tF97bB+yO
enc_mac_key:IN8kJ18dCYzYW+54wjh9dJKkqns=

Retrieving MAC key from association response...
Retrieving MAC key from association response...
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Decrypted MAC key Base64: rxpc7HcfrV0Ra+iZExVTTtRHhwA=
Decrypted MAC key Base64: rxpc7HcfrV0Ra+iZExVTTtRHhwA=
Decrypted MAC key (base64): rxpc7HcfrV0Ra+iZExVTTtRHhwA=
Decrypted MAC key (base64): rxpc7HcfrV0Ra+iZExVTTtRHhwA=
Creating association, type: HMAC-SHA1 handle:
diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D expires: Wed Jul 01 01:39:59
EDT 2009
Creating association, type: HMAC-SHA1 handle:
diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D expires: Wed Jul 01 01:39:59
EDT 2009
Created association for handle:
diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
Created association for handle:
diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Session:Association Type: DH-SHA1:HMAC-SHA1:OpenID1
Adding association to the in-memory store:
diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D with OP:
https://api.screenname.aol.com/auth/openidServer
Adding association to the in-memory store:
diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D with OP:
https://api.screenname.aol.com/auth/openidServer
Associated with https://api.screenname.aol.com/auth/openidServer
handle: diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
Associated with https://api.screenname.aol.com/auth/openidServer
handle: diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
Creating authentication request for OP-endpoint:
https://api.screenname.aol.com/auth/openidServer claimedID: http://openid.aol.com/
OP-specific ID: http://openid.aol.com/
Creating authentication request for OP-endpoint:
https://api.screenname.aol.com/auth/openidServer claimedID: http://openid.aol.com/
OP-specific ID: http://openid.aol.com/
Generated nonce: 2009-06-30T05:40:00Z0
Generated nonce: 2009-06-30T05:40:00Z0
Creating private association for opUrl https://api.screenname.aol.com/auth/openidServer
Creating private association for opUrl https://api.screenname.aol.com/auth/openidServer
Generated SHA256 MAC key: javax.crypto.spec.SecretKeySpec@fa77d842
Generated SHA256 MAC key: javax.crypto.spec.SecretKeySpec@fa77d842
Creating association, type: HMAC-SHA256 handle: expires: Tue Jun 30
01:45:00 EDT 2009
Creating association, type: HMAC-SHA256 handle: expires: Tue Jun 30
01:45:00 EDT 2009
Adding association to the in-memory store: with OP:
https://api.screenname.aol.com/auth/openidServer
Adding association to the in-memory store: with OP:
https://api.screenname.aol.com/auth/openidServer
Computing signature for input data:
http://www.domain.tld/openid.jsp?openid.rpnonce=2009-06-30T05%3A40%3A00Z0
Computing signature for input data:
http://www.domain.tld/openid.jsp?openid.rpnonce=2009-06-30T05%3A40%3A00Z0
Calculated signature: kmrqyhQ5XdvrJFiB8kmMO2ntGMdqsqMa6dPZ/TtXpO8=
Calculated signature: kmrqyhQ5XdvrJFiB8kmMO2ntGMdqsqMa6dPZ/TtXpO8=
Inserted consumer nonce: 2009-06-30T05:40:00Z0
Inserted consumer nonce: 2009-06-30T05:40:00Z0
return_to:http://www.domain.tld/openid.jsp?
openid.rpnonce=2009-06-30T05%3A40%3A00Z0&openid.rpsig=kmrqyhQ5XdvrJFiB8kmMO2ntGMdqsqMa6dPZ
%2FTtXpO8%3D
return_to:http://www.domain.tld/openid.jsp?
openid.rpnonce=2009-06-30T05%3A40%3A00Z0&openid.rpsig=kmrqyhQ5XdvrJFiB8kmMO2ntGMdqsqMa6dPZ
%2FTtXpO8%3D
Created empty parameter list.
Created empty parameter list.
Verifying realm: http://www.domain.tld/openid.jsp on return URL:
http://www.domain.tld/openid.jsp?openid.rpnonce=2009-06-30T05%3A40%3A00Z0&openid.rpsig=kmrqyhQ5XdvrJFiB8kmMO2ntGMdqsqMa6dPZ%2FTtXpO8%3D
Verifying realm: http://www.domain.tld/openid.jsp on return URL:
http://www.domain.tld/openid.jsp?openid.rpnonce=2009-06-30T05%3A40%3A00Z0&openid.rpsig=kmrqyhQ5XdvrJFiB8kmMO2ntGMdqsqMa6dPZ%2FTtXpO8%3D
Return URL:
http://www.domain.tld/openid.jsp?openid.rpnonce=2009-06-30T05%3A40%3A00Z0&openid.rpsig=kmrqyhQ5XdvrJFiB8kmMO2ntGMdqsqMa6dPZ%2FTtXpO8%3D
matches realm: http://www.domain.tld/openid.jsp
Return URL:
http://www.domain.tld/openid.jsp?openid.rpnonce=2009-06-30T05%3A40%3A00Z0&openid.rpsig=kmrqyhQ5XdvrJFiB8kmMO2ntGMdqsqMa6dPZ%2FTtXpO8%3D
matches realm: http://www.domain.tld/openid.jsp
Created auth request:
openid.identity:http://openid.aol.com/
openid.return_to:http://www.domain.tld/openid.jsp?
openid.rpnonce=2009-06-30T05%3A40%3A00Z0&openid.rpsig=kmrqyhQ5XdvrJFiB8kmMO2ntGMdqsqMa6dPZ
%2FTtXpO8%3D
openid.trust_root:http://www.domain.tld/openid.jsp
openid.assoc_handle:diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
openid.mode:checkid_setup

Created auth request:
openid.identity:http://openid.aol.com/
openid.return_to:http://www.domain.tld/openid.jsp?
openid.rpnonce=2009-06-30T05%3A40%3A00Z0&openid.rpsig=kmrqyhQ5XdvrJFiB8kmMO2ntGMdqsqMa6dPZ
%2FTtXpO8%3D
openid.trust_root:http://www.domain.tld/openid.jsp
openid.assoc_handle:diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
%2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
openid.mode:checkid_setup

Setting checkid_immediate auth request.
Setting checkid_immediate auth request.
Creating parameter list:
login_with:aol

Creating parameter list:
login_with:aol

Verifying authentication response...
Verifying authentication response...
Created empty parameter list.
Created empty parameter list.

Servlet.service() for servlet jsp threw exception
java.lang.RuntimeException: wrap:0x100: Required parameter missing:
openid.mode
at com.allthatnet.openid.Consumer.verifyResponse(Consumer.java:160)
at org.apache.jsp.openid_jsp._jspService(org.apache.jsp.openid_jsp:
77)
at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:97)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
at org.apache.jasper.servlet.JspServletWrapper.service
(JspServletWrapper.java:332)
at org.apache.jasper.servlet.JspServlet.serviceJspFile
(JspServlet.java:314)
at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:264)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter
(ApplicationFilterChain.java:252)
at org.apache.catalina.core.ApplicationFilterChain.doFilter
(ApplicationFilterChain.java:173)
at com.opensymphony.clickstream.ClickstreamFilter.doFilter
(ClickstreamFilter.java:56)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter
(ApplicationFilterChain.java:202)
at org.apache.catalina.core.ApplicationFilterChain.doFilter
(ApplicationFilterChain.java:173)
at org.apache.catalina.core.StandardWrapperValve.invoke
(StandardWrapperValve.java:204)
at org.apache.catalina.core.StandardContextValve.invoke
(StandardContextValve.java:178)
at org.apache.catalina.core.StandardHostValve.invoke
(StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke
(ErrorReportValve.java:105)
at org.apache.catalina.core.StandardEngineValve.invoke
(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.service
(CoyoteAdapter.java:148)
at org.apache.coyote.ajp.AjpAprProcessor.process(AjpAprProcessor.java:
426)
at org.apache.coyote.ajp.AjpAprProtocol$AjpConnectionHandler.process
(AjpAprProtocol.java:452)
at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:
1203)
at java.lang.Thread.run(Thread.java:619)
Caused by: org.openid4java.message.MessageException: 0x100: Required
parameter missing: openid.mode
at org.openid4java.message.Message.validate(Message.java:188)
at org.openid4java.message.AuthSuccess.validate(AuthSuccess.java:400)
at org.openid4java.message.AuthSuccess.createAuthSuccess
(AuthSuccess.java:117)
at org.openid4java.consumer.ConsumerManager.verify
(ConsumerManager.java:1146)
at com.allthatnet.openid.Consumer.verifyResponse(Consumer.java:131)

Johnny Bufu

unread,
Jul 3, 2009, 8:09:42 PM7/3/09
to openi...@googlegroups.com
On Mon, Jun 29, 2009 at 10:58:23PM -0700, Gmail User wrote:
> Created auth request:
> openid.identity:http://openid.aol.com/
> openid.return_to:http://www.domain.tld/openid.jsp?
> openid.rpnonce=2009-06-30T05%3A40%3A00Z0&openid.rpsig=kmrqyhQ5XdvrJFiB8kmMO2ntGMdqsqMa6dPZ
> %2FTtXpO8%3D
> openid.trust_root:http://www.domain.tld/openid.jsp
> openid.assoc_handle:diAyLjAgayAwIHdlM0FPUHlNR29aNG1xUUFDWGcrcUdrQjcwRT0%3D-
> j5HRXRB1VbPyg48jGKE1Q0FxhroDBSLEt%2BmJQLzP
> %2FdwNb18tZwCGJJTPStsruV2jmRo1Yw47bio%3D
> openid.mode:checkid_setup
>
> Setting checkid_immediate auth request.
>
> Creating parameter list:
> login_with:aol
>
> Verifying authentication response...
> Created empty parameter list.
>
> Servlet.service() for servlet jsp threw exception
> java.lang.RuntimeException: wrap:0x100: Required parameter missing:
> openid.mode
> at com.allthatnet.openid.Consumer.verifyResponse(Consumer.java:160)

It looks like you're receiving a response from AOL with just one
parameter "login_with:aol", which then you're attempting to verify as if
it were an authentication response.

From the JSP code you posted earlier I cannot tell where the problem is
(what is the Consumer class?)

The two methods in the SampleConsumer outline the openid authentication
flow.

Johnny

Reply all
Reply to author
Forward
0 new messages