Feature #33518
closed
Allow authentication with partial OpenID identifier
Added by Xavier Perseguers almost 13 years ago.
Updated over 12 years ago.
Description
Currently OpenID authentication requires the user to enter her full OpenID identifier (except for the last "/" which may be omitted):
http://<username>.<some-provider>.<tld>
or
https://<username>.<some-provider>.<tld>
This patch allows the user to enter only the useful part of this full identifier, namely:
<username>.<some-provider>.<tld>
Files
Please find a patch for that. I'd like the security team and Dmitry to have a look at it before hopefully pushing to Gerrit.
Writing from iPad, so I did not look into diff. The idea is good but there is one issue. If the identifier contains a path, slash should not be appended. Urls with a slash and without it are different according to rfc. Java urls typically do not have a slash in the end, so appending the slash would break authentication. If that's not the case for the patch, the change should be good.
- Status changed from Needs Feedback to Under Review
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
- Status changed from Resolved to Under Review
Can be closed. Merged in 4.7.0beta1
Xavier Perseguers May 21
Patch Set 4: Abandoned
No more backports!
- Status changed from Under Review to Closed
- TYPO3 Version changed from 4.6 to 4.7
Also available in: Atom
PDF