I have figured out what is hapenning.
This "https://www.google.com/accounts/o8/id"; Google URL is the one that
is used to perform the discovery of the actual, unique OpenID url for a
user.
When you sign up for gitorious using the above URL the discovery process
redirects back to gitorious.org with a specific URL like
"https://www.google.com/accounts/o8/id?id=AItOawnL3nvqwyrJdLEjVwry3SGjYmaBA6hJmy9";.
This specific URL gets saved as your OpenID URL. So every user that used
Google to sign up has its own unique URL based on the generic, discovery
one.
This means that after you sign up, you cannot put
"https://www.google.com/accounts/o8/id"; into OpenID field in a user
settings page. If you do this then Gitorious will never locate your
account when you log in with "https://www.google.com/accounts/o8/id";
because the actual URL returned by OAuth dance (like
"https://www.google.com/accounts/o8/id?id=AItOawnL3nvqwyrJdLEjVwry3SGjYmaBA6hJmy9";)
will not match the one you assigned to your account
("https://www.google.com/accounts/o8/id";).
Jonathan did exactly that and that's why he is asked to finalize a new
account.
Bapabooiee has an empty OpenID URL right now. The only way to assign the
google one to the existing account would be to sign up for the new
account with google discovery URL, then copy/backup the resulting URL
from user settings page, delete this new account, and paste the copied
URL in the OpenID field of the original user's settings page. That's a
workaround for now.
I also check Dan's account. As he said, he signed up with Google's
discovery URL and he ended up with a proper unique URL in the database.
Having said that, looks like the OpenID login needs some improvements.
The best thing we could do is to add a "Use Google OpenID" button next
to the OpenID URL field in user settings. Clicking on it would use the
discovery URL for auth and when redirected back to gitorious.org user
would get the unique OpenID URL set.
Thoughts?
--
--
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
---
You received this message because you are subscribed to the Google Groups "Gitorious" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
