OpenID Known Issues
From Facebook Developer Wiki
This page is here for keeping track of the known OpenID issues that arise.
Contents |
[edit] Reporting Issues
If your OpenID provider doesn't work, please check the OpenID Requirements. If you match the requirements but it still doesn't work, please file a bug.
[edit] Automatic Login
There have been some reports of automatic login not working. To debug this, check a few things:
- Does your provider support checkid_immediate mode? Note that Yahoo and Myspace do not. Check the OpenID Requirements.
- Did you check the "remember me" box when you linked? This is a common issue with Google logins.
- When you log in, is the "openid_p" cookie set on your browser?
- If the cookie is set, and you go to www.facebook.com, do you see background activity? You can check if there was a ping to Google via the Net tab in Firebug.
If all that is true and you're still not logged in, please file a bug with the results of each of those activities and I'll check it out.
[edit] Discovery
OpenID Discovery is fairly complex, and different providers work in different ways. Here I'll list a few of the major providers that don't currently work and what we're doing to fix them.
These are listed in order of priority.
[edit] Claim.id
[edit] Chi.mp
We've fixed this on our end: http://bugs.developers.facebook.com/show_bug.cgi?id=5366
However we've noted that log in works from FireFox 3 but fails from Safari 4 Beta. More info can be found at http://getsatisfaction.com/chimp/topics/openid_login_with_facebook_does_not_work#reply_1126839
[edit] Link Tags
For some reason my library is having a problem detecting the <link> tags.
http://bugs.developers.facebook.com/show_bug.cgi?id=5414
[edit] Delegation
Reported that davidrecordon.com delegates to the right provider, but it doesn't seem to always work. In my implementation, it seems we're not doing the proper checks for identity and claimed_id.
http://bugs.developers.facebook.com/show_bug.cgi?id=5356
Suppose the page has multiple delegations with all but one disabled with <!. Then the current implementation picks up the first entry, even if it is disabled. To see an example, try aswath.mocaedu.com
[edit] Always Using identifier_select
Some users have noted that the immediate call is always done using directed identity, which may have some negative implications.
