CODEWITHSUNDEEP
asp.net-mvcopeniddotnetopenauth
Saxman
Saxman

Reputation: 5089

DotNetOpenAuth & MvcOpenID - Works locally but not on production server?

I'm implementing OpenID with an MVC app and pretty much uses the MvcOpenID on CodePlex (http://mvcopenid.codeplex.com/), which also implements DotNetOpenAuth. My site work well locally, but somehow it doesn't work when deployed to my server. When tracing it with Firebug, it says "Failed to load http://www.kennysax.com/User/Login/ ...", but again, it worked locally, just localhost vs. my domain name.

If you want to check out, you can visit my site (http://www.kennysax.com - just a personal blog) and login with an supported OpenID provider...

Thanks.

Upvotes: 2

Views: 515

Answers (1)

Saxman
Saxman

Reputation: 5089

It confused the heck out of me, luckily, I was able to remote to my production machine, run the stock MVCOpenId project, step through the debug and see the error. The error was This message has already been processed. This could indicate a replay attack in progress, and it seems to be related to a setting on DotNetOpenAuth (I wish I could some how see that message without having to debug the code!). A setting in the web.config solved it, change the maxAuthenticationTime to 0:10:

<openid maxAuthenticationTime="0:10" ... ...

Thanks all for looking.

Upvotes: 2

Related Questions