Should use the mainsite's root URL as the openid.realm

Bug #530738 reported by Guilherme Salgado on 2010-03-02
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
High
Guilherme Salgado

Bug Description

When sending a user to authenticate on the OpenID provider, we should use the mainsite's root URL instead of the application's URL (as we do currently). That's because the realm is "designed to give the end user an indication of the scope of the authentication request" and in our case the realm is really launchpad.net for any of our vhosts.

Related branches

Changed in launchpad-foundations:
status: In Progress → Fix Committed
Changed in launchpad-foundations:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers