Using the noscript plugin breaks SSO javascript integration (with Moin?)

[Christian Reis]

Steps to reproduce:

1. Install noscript in firefox: http://noscript.net/
2. Attempt to log in to http://wiki.linaro.org/
3. Get stuck in a loop
4. For bonus points eventually hit the standard moin login page

You can work around this by disabling noscript.net, but that's not the ideal solution -- in particular because we worked hard to ensure the SSO work was Javascript-free from the Launchpad.net side.

[Stuart Metcalfe (stuartmetcalfe)]

This is one of those "works for me" moments. I think I discussed this with kiko and it looked like the user might have been trying to enter credentials into the moin login form which is shown alongside the openid login form. This is more of a confusing UX in moin's openid implementation. We need to investigate whether the upstream openid in moin 1.9+ has improved at all but it surely sucks badly in the one we have deployed :(

[Ralph Green (severian)]

There was a login for help.ubuntu.com presented and it asked for my name and password. There was no openid login presented. In fact, I was already logged into Launchpad. Until I decided to enable javascript temporarily for this site, I was in an endless loop with no real way to login. If javascript is not supposed to be needed, then this is a real bug.

I am using Firefox 3.6.18 on Ubuntu Lucid with all patches applied as of today. I do have noscript installed.