Issue #19528 has been updated by Dawn Foster.

Status changed from Unreviewed to Closed

Cleaning up old bugs. I'm assuming this is resolved, but if not, you can open 
it as a new ticket here: https://tickets.puppetlabs.com/browse/ASK

----------------------------------------
Bug #19528: OpenID sensitive to protocol spec
https://projects.puppetlabs.com/issues/19528#change-102612

* Author: Wil Cooley
* Status: Closed
* Priority: Normal
* Assignee: Evgeny Fadeev
* Category: 
* Target version: 
* Keywords: 
* Branch: 
----------------------------------------
I just tried to login with my OpenID without the protocol spec ("https://";), 
which I guess I seem to do regularly. The site forwarded me to my OpenID 
provider and I logged in but upon coming back I got a bare white `502 Bad 
Gateway` nginx error (I regret that I did not capture the whole error, but 
there was not much more than that).

I went through again, this time including the protocol spec and I was taken to 
a user registration page, which I assume is the expected behavior.

Without clicking "Signup" on the registration page, I went back to the sign-in 
page, entered my OpenID w/o protocol spec again, (I assume) did the bounce 
through my OpenID provider, and this time was taken back to the PL-themed 
Askbot sign-in page, now with the error banner at the top that says, "OpenID 
myexampleopenid.myopenid.com is invalid".

So, it seems like there are two separate issues and I apologize in advance for 
being a lazy reporter and conflating them:

1. The nginx-generated error page is probably not what is intended; it should 
presumably be a pretty themed error page.
2. I should be able to drop the protocol spec; I do not know if this is 
contrary to the OpenID standard or not, but I cannot imagine any harm -- there 
should never be another identity at "myexampleopenid.myopenid.com", regardless 
of whether the protocol is "https://"; or "puppet://" or "gopher://"; (ok, maybe 
those two wouldn't work, but the point stands).


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to