[TYPO3-dev] OpenID for TYPO3 Backend issues

Søren Malling soren.malling at gmail.com
Wed Dec 1 15:12:17 CET 2010


For anybody interested:

FYI #16598: Login via OpenID is impossible

above commit to TYPO3 Core fixed my openid issues

Thanks Steffen!

Regards

Søren Malling

TYPO3 Brugergruppe Danmark: www.typo3danmark.dk
Twitter: twitter.com/sorenmalling



On Tue, Nov 30, 2010 at 11:10 AM, Søren Malling <soren.malling at gmail.com> wrote:
> Thanks to both of your for insight in  OpenID and comitting a patch
> which might solve my problem :)
>
> I will be able to test it tomorrow on a trunk installation, really
> looking forward to benefit from OpenID :)
>
> Once again, thanks alot!
>
> Søren Malling
>
> TYPO3 Brugergruppe Danmark: www.typo3danmark.dk
> Twitter: twitter.com/sorenmalling
>
>
>
> On Tue, Nov 30, 2010 at 10:27 AM, Dmitry Dulepov
> <dmitry.dulepov at typo3.org> wrote:
>> Hi!
>>
>> Søren Malling wrote:
>>>
>>> I know that you are the author behind this extension, so you might
>>> have a "are you dumb, of course it works" experience;-)
>>>
>>> Is there any information i can provide that will make it possible to
>>> debug this issue?
>>
>> The problem is that I never hit a problem with logins :) There was a problem
>> some time ago with Yahoo: it was using one address for login but returned
>> another address in response. The spec does not forbid this but does not
>> allow it either, so it was a border case. If I remember correctly, we
>> patched the core for that case. But I can be mistaken (details are in the
>> BT). This is the only problem case I know.
>>
>> I have to use OpenID at work and I know many other companies use it too. So
>> I suggest to try with some other OpenID provider (Yahoo, Google,
>> LiveJournal, etc) and see if it helps. If it does not, there is no easy
>> solution. It needs investigation and that can be tought task because OpenID
>> uses multiple request/response with encryption even when it looks like a
>> single redirection to their server. So it is always hard to debug&fix.
>>
>> --
>> Dmitry Dulepov
>> TYPO3 core&security team member
>> Twitter: http://twitter.com/dmitryd
>> Read more @ http://dmitry-dulepov.com/
>> _______________________________________________
>> TYPO3-dev mailing list
>> TYPO3-dev at lists.typo3.org
>> http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-dev
>>
>




More information about the TYPO3-dev mailing list