Hello Allen,

Please provide me any sample code to do the Attribute Exchange. I'm using C# .net. I have a solution using which I can get user profile using OAuth.


Thanks,
Amar

Hi Amar,

You can check out some existing OpenID libraries from
here:
http://openid.net/developers/libraries


Thanks,
Yu Wang
Yahoo! Membership Team

Hi,

The signature of the OpenID response seems not to be correct when Profile contains "&"...

Have you already heard about this issue ?

Charles.

Hi Charles,

We are not aware of this issue. Can you please provide information
on how to reproduce this?


Thanks,
Yu Wang
Yahoo! Membership Team

Hi,

In my basic profile a tried to modify the name like this : "name&". (http://profiles.yahoo.com/edit/basicinfo)

Afterward, I performed an OpenID request asking for AX attributes :
[ext0] => http://axschema.org/namePerson/friendly
[ext1] => http://axschema.org/namePerson
[ext2] => http://axschema.org/contact/email
[ext3] => http://axschema.org/person/gender
[ext4] => http://axschema.org/pref/language
[ext5] => http://axschema.org/pref/timezone
[ext6] => http://axschema.org/media/image/default

Note that you have to ask severals attributes because the problem occurs only where the OpenID response is made by POST (auto-post form).

If you want more testing or explanation, contact me on charlesmarais2 [at] yahoo.com.

Charles.

Hi Charles,

Thanks for the details. I can reproduce the same issue. I'll work with the
relevant team to fix this.

Thanks,
Yu Wang

Hi,

The issue seems to have been fixed. The signature is now correct.

Just a question :

When the name is for example "toto&", I receive "toto&" for the name.
Shouldn't I have received "toto&" ?

Charles.

Hi Charles,

I don't think it is fixed because I am not aware of any changes having
been made to the system that causes the issue.

If the user's name contains "toto&", we should return "toto&", not
"tot&".

Thanks,
Yu Wang

if you want to add most openID and OpenAuth providers to your website you can use http://www.NyaLog.in. it is very easy to implement and manage.
i am sure its really help you

There are no details there.
No-one's going to use your APIs if you hide the documentation - lif eis too short