Drupal Association members fund grants that make connections all over the world.
This "D7 only" issue is tight related to, that one needs to be fixed in D8 first. But because this needs to be fixed ASAP in D7, in meantime we can work on a part of the fix which affects D7 only.
For D7 we need to provide some transition path for users with Openid accounts which has fragment part but Drupal 7.0 stripped it, so afterwill be commited these users will fails to login using Openid identifiers which were affected (not all providers are using the fragment part e.g. Yahoo does but Flickr doesn't).
Me and c960657 agreed inthat the probably best way how to provide this transition will be this way:
I think better will be some security announcement and message during unsuccesfull openid login if we found that there is same identifier in the DB but without fragment, may be?
Marking as critical since the related issue is also marked as critical.
PASSED: [[SimpleTest]]: [MySQL] 36,285 pass(es). View
PASSED: [[SimpleTest]]: [MySQL] 36,280 pass(es). View
PASSED: [[SimpleTest]]: [MySQL] 36,340 pass(es). View
FAILED: [[SimpleTest]]: [MySQL] Unable to apply patch 1120290-46-openid_provide_transition_plus_1076366_0.patch. This may be a -p0 (old style) patch, which is no longer supported by the testbots. View
FAILED: [[SimpleTest]]: [MySQL] Unable to apply patch 1120290-46-openid_provide_transition_plus_1076366_plus_575810.patch. This may be a -p0 (old style) patch, which is no longer supported by the testbots. View