I’m building an OpenID provider using DotNetOpenAuth, and I need to support stateless mode verification step when the RP return the assertion with mode set to check_authentication and the OP verifies the assertion.
I wonder how to do this step using DotNetOpenAuth ?
OpenID Providers cannot be completely stateless. They must store associations and nonces. But aside from these two, check_auth steps are stateless.