StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PO
text
Body
copied!<p>So the reason for this error is that AOL is unable to verify the Rely Party return_to URL (per section 13 of the OpenID 2 spec [<a href="http://openid.net/specs/openid-authentication-2_0.html#rp_discovery]" rel="noreferrer">http://openid.net/specs/openid-authentication-2_0.html#rp_discovery]</a>). This step is performed to protect the user from an attack where the realm specified doesn't match the return_to URL.</p> <p>To get rid of this error, you need to support XRDS discovery via the specified realm string. Based on the screenshot, this just means adding support into the server running on localhost.</p> <p>Basically, an HTTP request to <a href="http://localhost:56709" rel="noreferrer">http://localhost:56709</a> with an Accept HTTP header of application/xrds+xml should return either a response HTTP header of X-XRDS-Location with a value specifying the location of the XRDS file, or it can return the XRDS document directly.</p> <p>The XRDS document should look something like this...</p> <pre><code><?xml version="1.0" encoding="UTF-8"?> <xrds:XRDS xmlns:xrds="xri://$xrds" xmlns:openid="http://openid.net/xmlns/1.0" xmlns="xri://$xrd*($v*2.0)"> <XRD> <Service xmlns="xri://$xrd*($v*2.0)"> <Type>http://specs.openid.net/auth/2.0/return_to</Type> <URI>http://localhost:56709/return_to/url/path</URI> </Service> </XRD> </xrds:XRDS> </code></pre> <p>NOTE: HTTP requests to localhost will fail as it's not possible to reach that site. The warning will continue until the XRDS document is deployed to a reachable site.</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload