Added warning so OPs using DNOI are aware that they may be breaking URL delegation.

1 files changed, 9 insertions, 0 deletions

diff --git a/src/DotNetOpenId/Provider/CheckIdRequest.cs b/src/DotNetOpenId/Provider/CheckIdRequest.cs
index ec6087b..7795dd8 100644
--- a/src/DotNetOpenId/Provider/CheckIdRequest.cs
+++ b/src/DotNetOpenId/Provider/CheckIdRequest.cs
@@ -124,6 +124,15 @@ namespace DotNetOpenId.Provider {
 					}

 

 					localIdentifier = value;

+				} else {

+					// Help warn the Provider if they are inadvertently breaking URL delegation

+					UriIdentifier oldUriClaimedIdentifier = claimedIdentifier as UriIdentifier;

+					if (oldUriClaimedIdentifier != null) {

+						UriIdentifier newUriClaimedIdentifier = value as UriIdentifier;

+						if (newUriClaimedIdentifier == null || !string.Equals(oldUriClaimedIdentifier.Uri.Host, newUriClaimedIdentifier.Uri.Host, StringComparison.OrdinalIgnoreCase)) {

+							Logger.WarnFormat("Changing the Claimed Identifier from {0} to {1} may be breaking OpenID URL delegation.  Consider normalizing the ClaimedIdentifier at the identity page using redirects, or by setting the ClaimedIdentifier in the assertion only if the hostname of the old and new claimed identifiers are the same.", claimedIdentifier, value);

+						}

+					}

 				}

 				

 				claimedIdentifier = value;