re #19 some polishment of the provider API. Update the README with current name of the ALLOW-UNENCRYPTED-ASSOCIATION-P.
Sat Jun 11 18:00:32 PDT 2011 Anton Vodonosov <avodonosov@yandex.ru>
* re #19 some polishment of the provider API. Update the README with current name of the ALLOW-UNENCRYPTED-ASSOCIATION-P.
diff -rN -u old-cl-openid/README.html new-cl-openid/README.html
--- old-cl-openid/README.html 2014-07-22 10:32:45.000000000 -0700
+++ new-cl-openid/README.html 2014-07-22 10:32:45.000000000 -0700
@@ -7,7 +7,7 @@
<title>CL-OpenID</title>
<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
<meta name="generator" content="Org-mode"/>
-<meta name="generated" content="2011-06-12 03:42:49 "/>
+<meta name="generated" content="2011-06-12 03:59:37 "/>
<meta name="author" content="Maciej Pasternacki"/>
<meta name="description" content=""/>
<meta name="keywords" content=""/>
@@ -148,7 +148,7 @@
</ul>
</li>
<li><a href="#sec-3_2_2">3.2.2 Constant <code>+INDIRECT-RESPONSE-CODE+</code> </a></li>
-<li><a href="#sec-3_2_3">3.2.3 Function <code>HANDLE-OPENID-PROVIDER-REQUEST</code> <i>op message &amp;key secure-p</i> ⇒ <i>response values</i> </a></li>
+<li><a href="#sec-3_2_3">3.2.3 Function <code>HANDLE-OPENID-PROVIDER-REQUEST</code> <i>op message &amp;key allow-unencrypted-association-p</i> ⇒ <i>response values</i> </a></li>
<li><a href="#sec-3_2_4">3.2.4 Function <code>CANCEL-RESPONSE-URI</code> <i>op</i> <i>message</i> ⇒ <i>uri</i> </a></li>
<li><a href="#sec-3_2_5">3.2.5 Function <code>SUCCESSFUL-RESPONSE-URI</code> <i>op</i> <i>auth-request-message</i> ⇒ <i>uri</i> </a></li>
<li><a href="#sec-3_2_6">3.2.6 Generic <code>HANDLE-CHECKID-IMMEDIATE</code> <i>op message</i> ⇒ <i>generalized-boolean</i> </a></li>
@@ -670,7 +670,7 @@
</div>
<div id="outline-container-3_2_3" class="outline-4">
-<h4 id="sec-3_2_3"><span class="section-number-4">3.2.3</span> Function <code>HANDLE-OPENID-PROVIDER-REQUEST</code> <i>op message &amp;key secure-p</i> ⇒ <i>response values</i> </h4>
+<h4 id="sec-3_2_3"><span class="section-number-4">3.2.3</span> Function <code>HANDLE-OPENID-PROVIDER-REQUEST</code> <i>op message &amp;key allow-unencrypted-association-p</i> ⇒ <i>response values</i> </h4>
<div class="outline-text-4" id="text-3_2_3">
<p>Handle request <i>message</i> for OpenID Provider instance <i>op</i>.
@@ -680,6 +680,13 @@
secure to use unencrypted association method.
</p>
<p>
+<i>allow-unencrypted-association-p</i> specifies whether it is allowable
+to use unencrypted association method. Set it to NIL unless your
+OP endopoint uses HTTPS. See OpenID Authentication 2.0 - Final, section
+8.4.1. No-Encryption Association Sessions
+(<a href="http://openid.net/specs/openid-authentication-2_0.html#assoc_sess_types">http://openid.net/specs/openid-authentication-2\_0.html#assoc\_sess\_types</a>).
+</p>
+<p>
Returns two values: first is body, and second is HTTP code.
</p>
<p>
@@ -885,7 +892,7 @@
<div id="postamble">
<p class="author"> Author: Maciej Pasternacki
</p>
-<p class="date"> Date: 2011-06-12 03:42:49 </p>
+<p class="date"> Date: 2011-06-12 03:59:37 </p>
<p class="creator">HTML generated by org-mode 6.36c in emacs 23</p>
</div>
</div>
diff -rN -u old-cl-openid/README.org new-cl-openid/README.org
--- old-cl-openid/README.org 2014-07-22 10:32:45.000000000 -0700
+++ new-cl-openid/README.org 2014-07-22 10:32:45.000000000 -0700
@@ -211,12 +211,18 @@
*** Constant =+INDIRECT-RESPONSE-CODE+=
HTTP code recommented to use for indirect responses sent via HTTP redirect.
-*** Function =HANDLE-OPENID-PROVIDER-REQUEST= /op message &key secure-p/ ⇒ /response values/
+*** Function =HANDLE-OPENID-PROVIDER-REQUEST= /op message &key allow-unencrypted-association-p/ ⇒ /response values/
Handle request /message/ for OpenID Provider instance /op/.
/secure-p/ should be passed by caller to indicate whether it is
secure to use unencrypted association method.
+ /allow-unencrypted-association-p/ specifies whether it is allowable
+ to use unencrypted association method. Set it to NIL unless your
+ OP endopoint uses HTTPS. See OpenID Authentication 2.0 - Final, section
+ 8.4.1. No-Encryption Association Sessions
+ (http://openid.net/specs/openid-authentication-2_0.html#assoc_sess_types).
+
Returns two values: first is body, and second is HTTP code.
On HTTP redirections (the second value between 300 and 399 inclusive),
diff -rN -u old-cl-openid/README.txt new-cl-openid/README.txt
--- old-cl-openid/README.txt 2014-07-22 10:32:45.000000000 -0700
+++ new-cl-openid/README.txt 2014-07-22 10:32:45.000000000 -0700
@@ -2,7 +2,7 @@
=========
Author: Maciej Pasternacki
-Date: 2011-06-12 03:42:02
+Date: 2011-06-12 03:59:34
Cl-OpenID is an implementation of [OpenID] protocol in Common Lisp. It
@@ -61,7 +61,7 @@
3.2.1 Class =OPENID-PROVIDER=
3.2.1.1 Accessor =ENDPOINT-URI= /op/ ⇒ /uri/
3.2.2 Constant =+INDIRECT-RESPONSE-CODE+=
- 3.2.3 Function =HANDLE-OPENID-PROVIDER-REQUEST= /op message &key secure-p/ ⇒ /response values/
+ 3.2.3 Function =HANDLE-OPENID-PROVIDER-REQUEST= /op message &key allow-unencrypted-association-p/ ⇒ /response values/
3.2.4 Function =CANCEL-RESPONSE-URI= /op/ /message/ ⇒ /uri/
3.2.5 Function =SUCCESSFUL-RESPONSE-URI= /op/ /auth-request-message/ ⇒ /uri/
3.2.6 Generic =HANDLE-CHECKID-IMMEDIATE= /op message/ ⇒ /generalized-boolean/
@@ -332,18 +332,27 @@
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HTTP code recommented to use for indirect responses sent via HTTP redirect.
-3.2.3 Function =HANDLE-OPENID-PROVIDER-REQUEST= /op message &key secure-p/ ⇒ /response values/
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+3.2.3 Function =HANDLE-OPENID-PROVIDER-REQUEST= /op message &key allow-unencrypted-association-p/ ⇒ /response values/
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Handle request /message/ for OpenID Provider instance /op/.
/secure-p/ should be passed by caller to indicate whether it is
secure to use unencrypted association method.
+ /allow-unencrypted-association-p/ specifies whether it is allowable
+ to use unencrypted association method. Set it to NIL unless your
+ OP endopoint uses HTTPS. See OpenID Authentication 2.0 - Final, section
+ 8.4.1. No-Encryption Association Sessions
+ ([http://openid.net/specs/openid-authentication-2\_0.html#assoc\_sess\_types]).
+
Returns two values: first is body, and second is HTTP code.
On HTTP redirections (the second value between 300 and 399 inclusive),
the primary returned value will be an URI to redirect the user to.
+
+ [http://openid.net/specs/openid-authentication-2\_0.html#assoc\_sess\_types]: http://openid.net/specs/openid-authentication-2_0.html#assoc_sess_types
+
3.2.4 Function =CANCEL-RESPONSE-URI= /op/ /message/ ⇒ /uri/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Returns the URI of the Relying Party to redirect the user's browser