Hallo Marcin,


> Having said that, looks like the OpenID login needs some improvements.
> The best thing we could do is to add a "Use Google OpenID" button
> next to the OpenID URL field in user settings. Clicking on it would
> use the discovery URL for auth and when redirected back to
> gitorious.org user would get the unique OpenID URL set.

Gitorious doesn't support OpenID provider URLs (that's what the
generic Google OpenID is), only OpenID identifiers.

The OpenID supports login with both, Gitorious not. TYPO3 had a similar
problem, but that's fixed now[1].

A correct solution would be to not use the OpenID that is input at the
beginning for anything except OpenID server discovery - nothing more.
The "claimed ID" returned by the OpenID server is the one that has to be
use to identify the user in the gitorious user database.

This problem does not only affect google, but all OpenID URLs that
delegate via XRDS.


[1] http://forge.typo3.org/issues/25322

-- 
Viele Grüße
Dipl.-Inf. Christian Weiske
Senior Developer

T: +49 341 47842 16

++++++++++++++
Netresearch - Passion for eCommerce
++++++++++++++

Netresearch GmbH & Co. KG
Nonnenstraße 11d - 04229 Leipzig
http://www.netresearch.de/

Registergericht: AG Leipzig HRA 15614
Komplementär: Netresearch Beteiligungs GmbH, AG Leipzig HRB 17018
Geschäftsführer: Michael Ablass

-- 
-- 
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]

--- 
You received this message because you are subscribed to the Google Groups 
"Gitorious" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to