Ticket #75 (closed enhancement: fixed)

Opened 10 months ago

Last modified 10 months ago

Add RP configuration setting to force discarding of unsigned extensions

Reported by: http://blog.nerdbank.net/ Owned by: http://blog.nerdbank.net/
Priority: major Milestone: v3.2 RTW
Component: OpenID Version:
Keywords: rp Cc:

Description

Although IAuthenticationResponse already separates signed from unsigned extensions, policy may require that unsigned extensions be ignored completely. There should be a configuration option to do this.

Change History

Changed 10 months ago by http://blog.nerdbank.net/

  • status changed from new to closed
  • resolution set to fixed

master 434668c1e32fcc0087b220067bb1e4eec2ccbca9

Note: See TracTickets for help on using tickets.