1.1 --- a/WebStack/Resources/OpenIDRedirect.py Sat Nov 17 00:30:16 2007 +0000
1.2 +++ b/WebStack/Resources/OpenIDRedirect.py Sat Nov 17 00:49:08 2007 +0000
1.3 @@ -42,8 +42,11 @@
1.4 # If requested, attempt to verify OpenID assertions.
1.5 # http://openid.net/specs/openid-authentication-2_0-12.html#rfc.section.11
1.6
1.7 - if fields.get("openid.ns", [None])[0] == self.openid_ns and \
1.8 - fields.get("openid.mode", [None])[0] == "id_res":
1.9 + if fields.get("openid.mode", [None])[0] == "id_res":
1.10 +
1.11 + # The additional condition could be used to insist on OpenID 2.0
1.12 + # conformance:
1.13 + # fields.get("openid.ns", [None])[0] == self.openid_ns
1.14
1.15 if self.authenticator.authenticate(trans, verify=1):
1.16 trans.redirect(fields["openid.return_to"][0])