Outdated LightOpenID fork
thepparker opened this issue · comments
There's a major bug in your current fork where request_stream will perform requests twice, https://github.com/formapro/LightOpenID/blob/master/openid.php#L345 and https://github.com/formapro/LightOpenID/blob/master/openid.php#L352, causing the returned data to be invalid in the case of mode == check_authentication, because the security tokens have already been used.
Mewp has an updated package on packagist under lightopenid/lightopenid. If you could update your dependencies to refer to that package, I'd appreciate it
oh that's great news
I will do it when have time
done, use 2.1.0
great