hudora/django-googleappsauth — Issue #4: OpenID Signature Validation
Author: wil
Created: 2012-02-09 06:13:11+00:00
State: open

The OpenID callback view doesn't actually follow OpenID specs in validating the request. In particular, it's not validating the ``openid.sig``, nor storing and verifying association handle and nonce.