Merge remote-tracking branch 'upstream/master'

[quix0rs-gnu-social.git] / extlib / Auth / OpenID / Association.php

diff --git a/extlib/Auth/OpenID/Association.php b/extlib/Auth/OpenID/Association.php
index d1ac1ed9b9d9618767b73df9ca54b2311acfc18f..2729138ebb1ee5886a956dfe810e037e2683f436 100644 (file)
--- a/extlib/Auth/OpenID/Association.php
+++ b/extlib/Auth/OpenID/Association.php
@@ -374,7 +374,7 @@ class Auth_OpenID_Association {
         }
 
         $calculated_sig = $this->getMessageSignature($message);
-        return $calculated_sig == $sig;
+        return Auth_OpenID_CryptUtil::constEq($calculated_sig, $sig);
     }
 }