node-openid
node-openid copied to clipboard
Reuse cached associations
Associations are used to agree a shared secret between the RP and the OP. Right now, node-openid stores association information at the end of a successful association with an OP, but it only ever re-uses that information to validate positive assertions. It should also re-use those associations on subsequent authentication requests to the same OP.
You are of course right, this is one of the lacking parts of the library.
Patches are welcome, as always. :)