View source for I5:FeatureTest-OpenID Relying Party validates an assertion with the same openid.response nonce has not already been processed

{{FeatureTest
  |name               = OpenID Relying Party validates an assertion with the same openid.response nonce has not already been processed
  |testtype           = OpenID Authentication
  |identifier         = FTR-orp-sec-5
  |areatested         = 
  |status             = active
  |summary            = Tests OpenID RP's verification of response nonce for replay 
  |testedrole         = OpenID Identity Relying Party
  |referencesolution1 = JanRain PHP
  |referencesolution2 = Plaxo Signin
  |success            = The RP detects the replay and rejects asertions with duplicate nonces
  |failure            = The RP allows multiple logins with the same nonce
}}
# Open the result page for your solution and this test.
# Open the OpenID login page for your relying party.
# Enter http://test-id.org/RP/ResponseNonceCheck.aspx into the OpenID login field of the page.
## You will not be prompted for authentication.
# Click on the login button on the OP page.
# make certain you are successfully logged in to the RP
# Select the browsers back button to return to the test page.
# Click on the login button
# You are returned to the RP with the same nonce.
# Success is the RP rejecting the second login.
# Failure is the RP allowing the second login
# Set outcome in the results page:
## If the success criteria was met, set the outcome to "Works".
## If the test failed, set the outcome to "Failed" and enter information about the failure in the Notes section.
## If other issues occurred set the result to "Issues" and describe them in the Notes section.
# Add either four tilde <nowiki>~~~~</nowiki> signs or a text name into the "Tested by" parameter.
# Update the Date Tested, Browser, and Operating System lines of the results page.