node-openid
node-openid copied to clipboard
Recommended way to check nonces in multi-server environment
Hi,
It looks like the nonce list is in memory and therefore any check would be per server, not per session? Is this acceptable or is there a recommended way to check nonces in a multi-server env?
Apologies for the delayed reply. The nonce checks are not yet supporting multi-server scenarios. Someone will have to write a patch along the lines of what the library does for e.g. associations, should not be too hard.