Fixed bug in establishing associations with cleartext secrets.

DotNetOpenAuth · Mar 18, 2008 · 485d5cd · 485d5cd
1 parent 2992d2c
commit 485d5cd
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/DotNetOpenId/Consumer/AssociateResponse.cs b/src/DotNetOpenId/Consumer/AssociateResponse.cs
@@ -41,7 +41,9 @@ public Association Association {
 								byte[] secret;
 
 								string session_type;
-								if (!Args.TryGetValue(QueryStringArgs.openidnp.session_type, out session_type)) {
+								if (!Args.TryGetValue(QueryStringArgs.openidnp.session_type, out session_type) ||
+									session_type == QueryStringArgs.plaintext ||
+									session_type == string.Empty) {
 									secret = getDecoded(QueryStringArgs.mac_key);
 								} else if (QueryStringArgs.DH_SHA1.Equals(session_type, StringComparison.Ordinal)) {
 									byte[] dh_server_public = getDecoded(QueryStringArgs.openidnp.dh_server_public);