Issue #19528 has been updated by Dawn Foster.

Status changed from Unreviewed to Closed

Cleaning up old bugs. I'm assuming this is resolved, but if not, you can open 
it as a new ticket here: https://tickets.puppetlabs.com/browse/ASK

----------------------------------------
Bug #19528: OpenID sensitive to protocol spec
https://projects.puppetlabs.com/issues/19528#change-102612

* Author: Wil Cooley
* Status: Closed
* Priority: Normal
* Assignee: Evgeny Fadeev
* Category: 
* Target version: 
* Keywords: 
* Branch: 
----------------------------------------
I just tried to login with my OpenID without the protocol spec ("https://";), 
which I guess I seem to do regularly. The site forwarded me to my OpenID 
provider and I logged in but upon coming back I got a bare white `502 Bad 
Gateway` nginx error (I regret that I did not capture the whole error, but 
there was not much more than that).

I went through again, this time including the protocol spec and I was taken to 
a user registration page, which I assume is the expected behavior.

Without clicking "Signup" on the registration page, I went back to the sign-in 
page, entered my OpenID w/o protocol spec again, (I assume) did the bounce 
through my OpenID provider, and this time was taken back to the PL-themed 
Askbot sign-in page, now with the error banner at the top that says, "OpenID 
myexampleopenid.myopenid.com is invalid".

So, it seems like there are two separate issues and I apologize in advance for 
being a lazy reporter and conflating them:

1. The nginx-generated error page is probably not what is intended; it should 
presumably be a pretty themed error page.
2. I should be able to drop the protocol spec; I do not know if this is 
contrary to the OpenID standard or not, but I cannot imagine any harm -- there 
should never be another identity at "myexampleopenid.myopenid.com", regardless 
of whether the protocol is "https://"; or "puppet://" or "gopher://"; (ok, maybe 
those two wouldn't work, but the point stands).


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to