Project

General

Profile

Actions
Copy link

Bug #27276

closed

OpenID sysext: Loop with OpenId Server if login via GET parameters

Added by Markus Kurde almost 13 years ago. Updated almost 10 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Miscellaneous
Target version:
-
Start date:
2011-06-07
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
4.5
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

If we try to login a FE-User with GET Parameters instead of using the FE login form, the openid extension creates a loop with the Openid server.

http://foo.bar.com/login.html?user=http%3A%2F%2Fid.server.com%2Ffoo%40bar.com&logintype=login&pid=12345

We fixed this issue by removing the logintype=login prameter out of the $requestURL. We did this in typo3/sysext/openid/sv1/class.tx_openid_sv1.

A patch is attached.

Files

0001-Remove-the-GET-Parameter-logintype-in-the-given-URL-.patch (3.22 KB) 0001-Remove-the-GET-Parameter-logintype-in-the-given-URL-.patch Markus Kurde, 2011-06-07 14:36
Actions
Copy link

Also available in: Atom PDF