Re: Responding to a 2.0 request with a 1.1 response

2008-07-20 Thread Martin Atkins
(sorry for responding to myself.) Martin Atkins wrote: > > Another similar and perhaps more likely case is when a user does > 2.0-style delegation to a clavid.com identifier, omitting the 1.1-style > delegation. Net::OpenID::Consumer with 1.1 compatibility enabled fails > in this case because

Responding to a 2.0 request with a 1.1 response

2008-07-20 Thread Martin Atkins
A few weeks back I got a report that the in-progress 2.0 branch of the perl libraries (Net::OpenID) wouldn't authenticate against the provider clavid.com, because while they accept 2.0 requests they respond with 1.1-format assertion messages. Net::OpenID did have a bug in that it wasn't allowi