Geek Answers Handbook

DotNetOpenId - "This message has already been processed" Error

I start with OpenId using the dotnetopenid library, and so far so good, but when I try to log in, it shows me the following message:

This message has already been processed. This may mean a replay attack.

The first time I used my application, it failed, and after that the above message always returns.

How can I “log off” the user that I use for testing, or how can I clear the request so that I can log in / out?

Thanks in advance! =)

+1
openid dotnetopenauth
source share
3 answers

I found the problem, the problem, as usual ...

I called GetResponse more than once and received an error message.

Sorry for the inconvenience and thanks for your answers =)

+1
source share

A re-attack message is usually due to clicking Refresh on the browser, while the URL of your browser still contains many OpenID parameters. Try to clear everything after? check or just enter the url and press enter. If this does not work, try adding a question mark to the URL and press enter.

How to log out? DotNetOpenId uses forms authentication by default, so you can disable the user by calling FormsAuthentication.SignOut ().

0
source share

On some versions of dotnetopenauth you can also get:

This message has already been processed. This may indicate a re-attack.

if your maxAuthenticationTime value is too low (which is clearly not related to the error in any way, but this is another problem). I experienced it only today.

To increase this value, edit the configuration entry as shown at http://www.dotnetopenauth.net/developers/help/configuration-options/ (I suggest setting the value to 0:10).

0
source share

More articles:


All Articles