Need support for required sreg attributes

[Michael Nelson]

Similar to bug 810626, currently most ISD apps that use SSO use django-openid-auth - which only sets email, fullname and nickname as optional fields in the SRegRequest.

We'll need support for required sreg attributes before SSO can update to allow users to choose which optional fields they share with the consumer.

Perhaps an OPENID_SREG_REQUIRED_FIELDS option would help for the moment (ultimately, the consumer should handle this itself).

[Michael Nelson (michael.nelson)]

I've checked software-center-agent, and it won't error if someones logs in for the first time without selecting any of the optional sreg attributes - it'll just create a user with username=openiduserX and no email.

The no email *is* an issue, as currently we need one to be able to 'check or create lp user' when a person purchases software (and raise a web service error if that method is called without one). So we'd need to ensure that at least email was required.

Another option which lifeless suggested on bug 810626 would be a great work-around for the moment: "Sounds like perhaps [SSO] should treat optional as required for trusted/internal sites, as a migration facility."