Monday, October 22, 2007

What a mess...

OpenID is a mess! Half of the supposed OpenID supported sites are busted. I've been going to OiD sites and monitoring the Request/Response conversation and I can barely get into half of the sites I've tried, or when I do get authenticated they make me register an account with them and associate my OiD with the account!?# WTF! What's the point of this thing? It so far has done nothing helpful, if anything it has lengthened the login process. I've only got into one site smoothly (toodledo.com) and that was only with my myopenid.com account and not my Sxipper account?

I wrote a little httpObserver to monitor what kind of info is being passed to and from my OP and the site I'm trying to login to. Every thing works accept for obtaining the responseStatus. I have no clue why, its getting me twisted. I need this info to look out for authentication responses. Below is some traffic dump (for the curious).

Topic:http-on-modify-requestURI:https://www.mixx.com/login Req.Method:POST
Status Code:0
Topic:http-on-modify-requestURI:http://www.myopenid.com/server?openid.mode=checkid_setup&openid.return_to=https%3A%2F%2Fwww.mixx.com%2Fopenid_login%3Fopen_id_complete%3D1%26nonce%3Dv3igUyzl%26nonce%3Dv3igUyzl&openid.trust_root=https%3A%2F%2Fwww.mixx.com%2F&openid.identity=http%3A%2F%2Fwugunz.myopenid.com%2F&openid.assoc_handle=%7BHMAC-SHA1%7D%7B470bb41e%7D%7Bmp0eyQ%3D%3D%7D Req.Method:GET
Status Code:0
Topic:http-on-modify-requestURI:https://www.myopenid.com/trust?request_id=0ab21b60 Req.Method:GET
Status Code:0
Topic:http-on-modify-requestURI:https://www.myopenid.com/trust_submit Req.Method:POST
Status Code:0
Topic:http-on-modify-requestURI:https://www.mixx.com/openid_login?open_id_complete=1&nonce=v3igUyzl&nonce=v3igUyzl&openid.assoc_handle=%7BHMAC-SHA1%7D%7B470bb41e%7D%7Bmp0eyQ%3D%3D%7D&openid.identity=http%3A%2F%2Fwugunz.myopenid.com%2F&openid.mode=id_res&openid.op_endpoint=http%3A%2F%2Fwww.myopenid.com%2Fserver&openid.response_nonce=2007-10-23T00%3A01%3A53ZvtuXjA&openid.return_to=https%3A%2F%2Fwww.mixx.com%2Fopenid_login%3Fopen_id_complete%3D1%26nonce%3Dv3igUyzl%26nonce%3Dv3igUyzl&openid.sig=4i3IeUkNkcyaw9VweBkgCV8He%2Bk%3D&openid.signed=assoc_handle%2Cidentity%2Cmode%2Cop_endpoint%2Cresponse_nonce%2Creturn_to%2Csigned Req.Method:GET
Status Code:0


Back to work, more constructive posts will follow... I hope. I needed to vent.

No comments: