getting even closer, using node-openid as my consumer now because the python one is hard to debug
I DECODED YOU, YOU LOSE OPENID2.0. YOU LOSE.
rewrote library so it is slightly better organised
without any testing I believe both DH-SHA1 and DH-SHA256 are supported