Project

General

Profile

Actions
Copy link

Bug #27276

closed

OpenID sysext: Loop with OpenId Server if login via GET parameters

Added by Markus Kurde almost 13 years ago. Updated almost 10 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Miscellaneous
Target version:
-
Start date:
2011-06-07
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
4.5
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

If we try to login a FE-User with GET Parameters instead of using the FE login form, the openid extension creates a loop with the Openid server.

http://foo.bar.com/login.html?user=http%3A%2F%2Fid.server.com%2Ffoo%40bar.com&logintype=login&pid=12345

We fixed this issue by removing the logintype=login prameter out of the $requestURL. We did this in typo3/sysext/openid/sv1/class.tx_openid_sv1.

A patch is attached.

Files

0001-Remove-the-GET-Parameter-logintype-in-the-given-URL-.patch (3.22 KB) 0001-Remove-the-GET-Parameter-logintype-in-the-given-URL-.patch Markus Kurde, 2011-06-07 14:36
Actions
Copy link
 #1

Updated by Dmitry Dulepov almost 13 years ago

  • Status changed from New to Needs Feedback

Is there a public openid server where we can test this? Without testing we cannot make the change.

Actions
Copy link
 #2

Updated by Steffen Gebert over 12 years ago

  • Category set to 1134
  • Priority changed from Must have to Should have
Actions
Copy link
 #3

Updated by Christian Weiske almost 11 years ago

Markus, why do you remove the pid parameter?

Actions
Copy link
 #4

Updated by Markus Klein almost 10 years ago

  • Status changed from Needs Feedback to Closed
  • Is Regression set to No

No update for more than a year. Closing this issue.

Actions
Copy link

Also available in: Atom PDF