Using latest dotnetopenid as of Jan 7.

Report from user below:

OpenID is:

https://launchpad.net/~ryan-c-ahearn

When I try to use my launchpad.net openid to log in, which has worked before, I am consistently getting this error message:

Unable to log in with your OpenID provider:

OpenID parameter 'session_type' was missing from the query.

I have confirmed that the https://login.launchpad.net/+openid OP endpoint is not sending the session_type parameter back in the associate direct response message.

This OP seems to implement OpenID 2.0 (it sends the 'ns' parameter back), yet OpenID 2.0 mandates that session_type is NOT an optional parameter. In OpenID 1.x, it WAS an optional parameter. This is a common bug for OPs and I will talk to launchpad.net about getting this bug fixed on their end.

References: 1.1 spec: http://openid.net/specs/openid-authentication-1_1.html#anchor14 2.0 spec: http://openid.net/specs/openid-authentication-2_0.html#anchor20

Log: 2009-01-21 07:49:55,776 [7] DEBUG DotNetOpenId - Sending direct message to https://login.launchpad.net/+openid: openid.mode: associate openid.assoc_type: HMAC-SHA256 openid.session_type: no-encryption openid.ns: http://specs.openid.net/auth/2.0

2009-01-21 07:49:56,776 [7] DEBUG DotNetOpenId - Received direct response from https://login.launchpad.net/+openid: assoc_handle: {HMAC-SHA256}{49773614}{FAVOuA==} assoc_type: HMAC-SHA256 expires_in: 1209600 mac_key: FT2FeljKmr8WfSGzxCAbVtFUqrjeY+E0PoMMSiID0xI= ns: http://specs.openid.net/auth/2.0

2009-01-21 07:49:56,807 [7] ERROR DotNetOpenId - OpenIdException: OpenID parameter 'session_type' was missing from the query.

I have emailed feedback@launchpad.net and also filed a bug with them: https://bugs.launchpad.net/launchpad/+bug/319626

My bug was dup'd against this bug: https://bugs.launchpad.net/launchpad-foundations/+bug/318972

This bug is now marked as fixed, and they verified it in their staging that they could log into stackoverflow.com. The fix should go into production on Wednesday.