InternalOpenIDError: Failed to verify assertion

[liamcurry]

InternalOpenIDError: Failed to verify assertion

[tacyarg]

seems related to a fucked up response from steam..

[BenjaminNeilDavis]

I am having the same issue @graycatfromspace Any luck?

[mluogh]

@BenjaminNeilDavis I had the problem because I was using the same API key twice, once on my prod machine and once on my dev machine.

[FelikZ]

Fixed by adding missing middleware:

  app.use(passport.initialize());
  app.use(passport.session());

[meitinglei]

I have the same issue，can't fixed

[FelikZ]

@meitinglei try to use passport middleware AFTER all other express middlewares.

[luop90]

This issue is still occurring. It seems to happen at random, because some times users can login, and other times they can't.

[tobbbles]

@luop90 are you still having this issue?

(Will close if no response within a week of this.)

[aidenwallis]

I found out what the issue is, there's something wrong with a dependency inside, passport-openid, downgrade it and place it inside the passport-steam and it should fix it! :)

[luop90]

@mnzt Yes. In fact, it got so bad, I switched to everyauth because I couldn't get this one to work more then 10% of the time.

[tobbbles]

@luop90 express js irrelevant to this. Closing.

[luop90]

I edited my comment to everyauth, "express" was a typo... W/e

[aidenwallis]

I found the issue, I got mine to work finally, it doesn't seem as if you can use a database with it. As weird as it sounds, I just store a class in cookies in a MongoStore now, as it seems to work great now. And use the same passport and passport-steam version as in the example site. It all works great for me now! I'm not too fussed about storing it in a cookie, as it's not accessible to the user and the cookie is httpOnly and secure

[tobbbles]

@aidenwallis I've personally used this package with a database, what you do with the data shouldn't cause an error with the package at all, just an error with how you're handling it.

[aidenwallis]

I don't know, all I know is when I stopped it from adding users to a database everything works great. But it's not too big of a worry with my site so I'm just going to keep it this way, I literally just manipulated the example to use mongoose with no luck, so after using no database it seems to work.

[tobbbles]

@aidenwallis certainly sounds like a problem external to passport-steam.

At least you've got something to work out for you :).