Comment 2 for bug 259159

More from Elliot:

Barry Warsaw wrote:
Thanks Elliot, that was very helpful. Is the code available anywhere?

Yep, https://code.edge.launchpad.net/~rowan/launchpad/apache-openid

There are a few other interesting private branches at
https://code.launchpad.net/launchpad also...

Whenever someone goes to hacking on this module, it should be fixed not
to go into an infinite openID loop when denying someone access to the
resource :)