From d512d5802273faac184d133d64965336a68cd603 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Thu, 13 Aug 2009 17:48:36 -0400 Subject: response --- doc/forum/google_openid_broken__63__.mdwn | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'doc/forum') diff --git a/doc/forum/google_openid_broken__63__.mdwn b/doc/forum/google_openid_broken__63__.mdwn index 2ca339c3c..890bba4d9 100644 --- a/doc/forum/google_openid_broken__63__.mdwn +++ b/doc/forum/google_openid_broken__63__.mdwn @@ -3,3 +3,8 @@ when I login via to this wiki (or ours) via Google's OpenID, I get this error: Error: OpenID failure: no_identity_server: The provided URL doesn't declare its OpenID identity server. Any idea how to fix this?? + +> Google is [doing things with openid that are not in the spec](http://googledataapis.blogspot.com/2008/10/federated-login-for-google-account.html) +> and it's not clear to me that they intend regular openid to work at all. +> What is your google openid URL so I can take a look at the data they are +> providing? --[[Joey]] -- cgit v1.2.3 From 110d6e18b438809b53f5a2a12d81659247079464 Mon Sep 17 00:00:00 2001 From: lludwig Date: Fri, 14 Aug 2009 09:49:49 -0400 Subject: --- doc/forum/google_openid_broken__63__.mdwn | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'doc/forum') diff --git a/doc/forum/google_openid_broken__63__.mdwn b/doc/forum/google_openid_broken__63__.mdwn index 890bba4d9..e0b24eab9 100644 --- a/doc/forum/google_openid_broken__63__.mdwn +++ b/doc/forum/google_openid_broken__63__.mdwn @@ -8,3 +8,7 @@ Any idea how to fix this?? > and it's not clear to me that they intend regular openid to work at all. > What is your google openid URL so I can take a look at the data they are > providing? --[[Joey]] + + +http://openid-provider.appspot.com/larrylud + -- cgit v1.2.3 From cfdabf348db8f8ba75aac39678b060b39824db08 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Fri, 14 Aug 2009 15:09:01 -0400 Subject: forwarded upstream with analysis --- doc/forum/google_openid_broken__63__.mdwn | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'doc/forum') diff --git a/doc/forum/google_openid_broken__63__.mdwn b/doc/forum/google_openid_broken__63__.mdwn index e0b24eab9..0e0d8d118 100644 --- a/doc/forum/google_openid_broken__63__.mdwn +++ b/doc/forum/google_openid_broken__63__.mdwn @@ -12,3 +12,7 @@ Any idea how to fix this?? http://openid-provider.appspot.com/larrylud +> I've debugged this some and filed +> on the Openid perl +> module. It's a pretty easy fix, so I hope upstream will fix it quickly. +> --[[Joey]] -- cgit v1.2.3 From 3e086c84a2f826c77322a5dabdff1277eeb7152c Mon Sep 17 00:00:00 2001 From: "http://www.cse.unsw.edu.au/~willu/" Date: Fri, 14 Aug 2009 19:10:57 -0400 Subject: Related comments on openid redirection. --- doc/forum/google_openid_broken__63__.mdwn | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'doc/forum') diff --git a/doc/forum/google_openid_broken__63__.mdwn b/doc/forum/google_openid_broken__63__.mdwn index 0e0d8d118..1be9d0487 100644 --- a/doc/forum/google_openid_broken__63__.mdwn +++ b/doc/forum/google_openid_broken__63__.mdwn @@ -16,3 +16,15 @@ http://openid-provider.appspot.com/larrylud > on the Openid perl > module. It's a pretty easy fix, so I hope upstream will fix it quickly. > --[[Joey]] + +>> A little more information here: I'm using that same openid provider at the moment. Note that +>> that provider isn't google - it is someone using the google API to authenticate. I normally have it +>> set up as a redirect from my home page (which means I can change providers easily). + + + + +>> In that mode it works (I used it to log in to make this edit). However, when I try the openid +>> URL directly, it doesn't work. I think there is something weird with re-direction. I hope this +>> isn't a more general security hole. +>> -- [[Will]] -- cgit v1.2.3