"Cannot process OpenID-token RST",
"No claimed identifier found.");
return;
}
Association assoc;
try
{
assoc = _privateAssociations.generate(
org.openid4java.association.Association.TYPE_HMAC_SHA1, _expireIn.intValue());
}
catch (AssociationException e)
{
setWstFault(constants, response,
"Cannot instantiate private association store",
e.getMessage());
return;
}
if (! compat && _opEndpoint == null)
{
setWstFault(constants, response,
"Cannot process OpenID-token RST",
"OP-Endpoint not configured; required for OpenID 2 messages.");
return;
}
// nonces not used: OP invalidates private assoc handle on first use
String nonce = _nonceGenerator.next();
AuthSuccess openidResp;
try
{
openidResp = AuthSuccess.createAuthSuccess(
_opEndpoint, claimedID, claimedID,
compat, uriAppliesTo.toString(), nonce,
null, assoc, false);
if (! compat)
{
FetchResponse fetchResp = FetchResponse.createFetchResponse();
fetchResp.addAttributes(attrs);
openidResp.addExtension(fetchResp);
}
// sign the message
openidResp.setSignature(assoc.sign(openidResp.getSignedText()));
}
catch (OpenIDException e)
{
setWstFault(constants, response,
"Cannot generate OpenID assertion",