Error using openid4java with Yahoo OpenID service

[jdesb...@gmail.com]

I managed to get my site working with the myopenid.com provider using
the openid4java library. Next I tried using a Yahoo OpenID, but the
Yahoo site reports the following error at URL:

https://open.login.yahooapis.com/openid/op/auth?openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.return_to=http%3A%2F%2Ftest.galway.net%3A8080%2FGalwayNet%2Fjsp%2Fcustomer%2Flogin-openid.jsp&openid.realm=http%3A%2F%2Ftest.galway.net%3A8080%2FGalwayNet%2Fjsp%2Fcustomer%2Flogin-openid.jsp&openid.assoc_handle=XKcVelLGqAhv8IhW83aFTCmDxTkOvY8jicQEa6_ZF2C74FPaGpbLFakrAlzq9Mi4eYKLKJ2mgPyP6Ms3nxZLlkrSlKhfGs2SU6nGgRsa8g26RdxLNm92B0gRlNeI0x.d1A--&openid.mode=checkid_setup



(begin quote)

Ooops...

Sorry! Something is not quite right with the request we received from
the website you are trying to use. Please try again in a few minutes.
If this error persists, please contact the site administrator for the
website you are trying to use. If you are the site administrator,
click here to contact us.

(end quote)



I've tried entering my full Yahoo OpenID URL and just "me.yahoo.com"
and the same error appears. What's happening here? I am using
openid4java-0.9.2.jar + necessary extras.

Aside: I had great difficulty getting openid4java working from the
examples until I saw some posts pointing out that the version of the
library used in the "samples/simple-openid" directory is different
that in lib. (The version in samples works for me, those in lib
don't). I'm using distribution java-openid-sxip-0.9.4.339.tar.gz

[Johnny Bufu]

On 30-Jan-08, at 9:10 AM, jdesb...@gmail.com wrote:

> Next I tried using a Yahoo OpenID, but the
> Yahoo site reports the following error at URL:
>
> https://open.login.yahooapis.com/openid/op/auth?openid.ns=http%3A%2F
> %2Fspecs.openid.net%2Fauth%2F2.0&openid.claimed_id=http%3A%2F%
> 2Fspecs.openid.net%2Fauth%2F2.0%
> 2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%
> 2Fauth%2F2.0%2Fidentifier_select&openid.return_to=http%3A%2F%
> 2Ftest.galway.net%3A8080%2FGalwayNet%2Fjsp%2Fcustomer%2Flogin-
> openid.jsp&openid.realm=http%3A%2F%2Ftest.galway.net%3A8080%
> 2FGalwayNet%2Fjsp%2Fcustomer%2Flogin-
> openid.jsp&openid.assoc_handle=XKcVelLGqAhv8IhW83aFTCmDxTkOvY8jicQEa6_
> ZF2C74FPaGpbLFakrAlzq9Mi4eYKLKJ2mgPyP6Ms3nxZLlkrSlKhfGs2SU6nGgRsa8g26R
> dxLNm92B0gRlNeI0x.d1A--&openid.mode=checkid_setup

This request seems to be a v2 request (judging from the presence of
the claimed_id and realm params), but it's missing the openid.ns
namespace declaration.

Yahoo only supports OpenID 2.0, so I believe this is the cause of the
failure, while myopenid falls back to v1 when it doesn't see the
namespace.

Johnny

[jdesb...@gmail.com]

Do you think this is a limitation of the openid4java library I am
using?

(I'm using openid4java-0.9.2.jar from the samples/simple-openid
directory
in distribution tarball java-openid-sxip-0.9.4.339.tar.gz -- NB:
this is not the same as java-openid-sxip-0.9.4.jar in the root
directory of
the archive, which I couldn't get to work with the examples in the
documentation). My code is almost identical to the documentation
examples.

Thanks,

Joe.



On Jan 30, 6:07 pm, Johnny Bufu <joh...@sxip.com> wrote:

[jdesb...@gmail.com]

> This request seems to be a v2 request (judging from the presence of
> the claimed_id and realm params), but it's missing the openid.ns
> namespace declaration.

I just looked at that URL again and it does have a:
openid.ns=http://specs.openid.net/auth/2.0
parameter (it's the first parameter in the URL). So can that really
be the problem?

I also tried building a the library from SVN source... same error on
Yahoo. Unfortunately Yahoo gives no clue as to what the nature of the
error is.

Joe.


On Jan 30, 6:07 pm, Johnny Bufu <joh...@sxip.com> wrote:

[Johnny Bufu]

On 30-Jan-08, at 3:30 PM, jdesb...@gmail.com wrote:

>
>> This request seems to be a v2 request (judging from the presence of
>> the claimed_id and realm params), but it's missing the openid.ns
>> namespace declaration.
>
> I just looked at that URL again and it does have a:
> openid.ns=http://specs.openid.net/auth/2.0
> parameter (it's the first parameter in the URL). So can that really
> be the problem?

You're right, I missed the openid.ns - it is there indeed.

Next thing I notice is the claimed_id : identifier_select; maybe
Yahoo is not supporting this feature, so I suggest you try with
"me.yahoo.com" as they recomment.

Also, Allen Tom just posted on the openid list their support contact;
you may want to let them know as well.

openid-...@yahoo-inc.com
http://openid.net/pipermail/general/2008-January/004024.html

Johnny

[jdesb...@gmail.com]

Ok, that has progressed me quite a bit: I was falling foul of the the
real host name and port 80 requirement.

Not 100% there yet, but at least that error message from Yahoo is not
appearing anymore.

Thanks,

Joe.


On Jan 30, 11:47 pm, Johnny Bufu <joh...@sxip.com> wrote:

> On 30-Jan-08, at 3:30 PM, jdesbon...@gmail.com wrote:
>
>
>
> >> This request seems to be a v2 request (judging from the presence of
> >> the claimed_id and realm params), but it's missing the openid.ns
> >> namespace declaration.
>
> > I just looked at that URL again and it does have a:
> > openid.ns=http://specs.openid.net/auth/2.0
> > parameter (it's the first parameter in the URL). So can that really
> > be the problem?
>
> You're right, I missed the openid.ns - it is there indeed.
>
> Next thing I notice is the claimed_id : identifier_select; maybe
> Yahoo is not supporting this feature, so I suggest you try with
> "me.yahoo.com" as they recomment.
>
> Also, Allen Tom just posted on the openid list their support contact;
> you may want to let them know as well.
>

> openid-feedb...@yahoo-inc.comhttp://openid.net/pipermail/general/2008-January/004024.html
>
> Johnny

[jdesb...@gmail.com]

In case anyone else is working with Yahoo's service: I finally got it
to work with openid4java. So it does work! All problems were my
own :-)

My problems where:

* Must be a real host name, not IP number or localhost. This post
suggests a nice workaround to the host name problem:
http://openid.net/pipermail/general/2008-January/004023.html
(ie using *.localhacks.com which all point to localhost)

* Must be on port 80

* When I did move to port 80, my code was designed to auto-detect the
port and build the return url automatically. Consequently the ":8080"
in the URL turned to ":80" which it did not like. Solution is to
suppress explicitly stating the port number if running on port 80.

Joe.


On Jan 31, 1:05 am, "jdesbon...@gmail.com" <jdesbon...@gmail.com>
wrote: