DotNetOpenAuth Login Fails, But receiving data in querystring

Question

I am trying to set up OpenID on an ASP.Net 2 website that I am making right now, and using DotNetOpenAuth. But it seems I've run into a brick wall that won't budge no matter how many things I try.

While trying to sign-in with Google I am getting "Web request to 'https://www.google.com/accounts/o8/ud' failed." as response.

The weird thing is that Google displays the sign-in screen correctly which asks me to confirm whether I want to give the site access.

Additionally the sign-in data from Google is correctly being appended to the querystring.

So why isn't OpenID.GetResponse able to fetch me the correct data?

I can potentially get the sign-in data from the querystring myself. But is that a good idea?

Thank you for replying!

Edit: Just want to clarify here that the behaviour is on Localhost.

Answer 1

If your web server is behind a firewall or requires a proxy to make outbound HTTP requests, make sure your web.config file includes a snippet to use the system default proxy (or a specifically named one.

<system.net>
    <defaultProxy enabled="true" />
</system.net>

And no don't just retrieve the sign-in data from the query string yourself. There's lots of validation that has to be done on that string to avoid anyone being able to log in as anyone just by writing up the query string themselves. In fact it sounds like DotNetOpenAuth is failing during verification, so you're not likely to be able to do it yourself either until this outbound HTTP request problem is solved.

The tricky part here is why DNOA was able to send you to Google, but unable to contact Google later to verify the positive assertion. Can you enable logging and add the logs to your question if what I've shown above doesn't work?