Permalink
Browse files

Merge pull request #77 from mikehenrty/nostrip

Don't strip query strings from OP endpoint URLs when verifying assertions. This fixes #75 (issue with Google Federated Login).
  • Loading branch information...
2 parents 670e896 + 0b8fdf6 commit 2d4da81109df5eee52cce258f993c3bed79a92c1 @havard committed Jun 22, 2012
Showing with 0 additions and 6 deletions.
  1. +0 −6 openid.js
View
@@ -1095,12 +1095,6 @@ var _verifyAssertionAgainstProvider = function(provider, params, stateless, exte
if(provider.version.indexOf('2.0') !== -1)
{
var endpoint = params['openid.op_endpoint'];
- if (endpoint) {
- var qsIndex = endpoint.indexOf('?');
- if (qsIndex !== -1) {
- endpoint = endpoint.substring(0, qsIndex);
- }
- }
if (provider.endpoint != endpoint)
{
return callback({ message: 'OpenID provider endpoint in assertion response does not match discovered OpenID provider endpoint' });

0 comments on commit 2d4da81

Please sign in to comment.