https://bugzilla.wikimedia.org/show_bug.cgi?id=69289

            Bug ID: 69289
           Summary: OAuth does not set correct JWT issuer when accessing
                    over HTTPS
           Product: MediaWiki extensions
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: Unprioritized
         Component: OAuth
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected], [email protected],
                    [email protected]
       Web browser: ---
   Mobile Platform: ---

I am accessing OAuth over HTTPS (https://www.mediawiki.org), but the issuer
(iss field) I am getting back from the service says http://www.mediawiki.org
(no HTTPS). Because of this verification fails.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to