plone/plone.openid — pull request #3 by datakurre (2012-02-24 18:08:08+00:00)
Title: Including timestamp in nonce

Fixes https://dev.plone.org/ticket/11987 :

> Nonce should also include timestamp in
> source:plone.openid/trunk/plone/openid/store.py#L83
> This breaks with OpenID4Java for example because it uses
> salt only when timestamps are equal between requests.

The specs may say that this is voluntary, but e.g. all store implementations in python-openid seem to store timestamp with nonce: https://github.com/openid/python-openid/tree/master/openid/store