Detect revoked SSO tokens

Bug #624065 reported by Michael Vogt on 2010-08-25
22
This bug affects 4 people
Affects Status Importance Assigned to Milestone
Ubuntu Single Sign On Client
Medium
Ubuntu One Client Engineering team
ubuntu-sso-client (Ubuntu)
Medium
Ubuntu One Client Engineering team

Bug Description

Hi,

when the ubuntu-sso-client has a token it would be great if it could check if that token is still valid and if
not request a new token. If its not done in the sso client it will be code that needs to be written in all apps
that use the client to ensure that the token in use is valid and the user has not revoked it since.

Thanks,
 Michael

summary: - Please detect revoked SSO tokens
+ Detect revoked SSO tokens
Changed in ubuntu-sso-client:
status: New → Confirmed
assignee: nobody → Naty Bidart (nataliabidart)
importance: Undecided → Medium
tags: added: desktop+ u1-natty
Changed in ubuntu-sso-client:
status: Confirmed → Triaged
assignee: Naty Bidart (nataliabidart) → Ubuntu One Desktop+ team (ubuntuone-desktop+)
Michael Vogt (mvo) wrote :

I added a ubuntu task as I believe a persistent oneconf sync failure I got during the maverick cycle is caused by this issue (the token was revoked but the desktopcouch based tools assumed that if it comes from ubuntu-sso-client its valid and did not manage to recover).

Changed in ubuntu-sso-client (Ubuntu):
status: New → Triaged
importance: Undecided → Medium
assignee: nobody → Ubuntu One Desktop+ team (ubuntuone-desktop+)
Natalia Bidart (nataliabidart) wrote :

Michael and rest,

I've been thinking about this issue and I realized that if we check the validity of the tokens on each request, this will imply that the token retrieval will be network dependent, and we want to avoid that.

We may make public the validate_user method call through DBus. That way, any app is responsible to validate the token if they consider is necessary and if the know they have net conn.

tags: removed: desktop+
Leo Arias (elopio) on 2012-04-17
tags: added: natty
removed: u1-natty
Changed in ubuntu-sso-client:
status: Triaged → Won't Fix
Changed in ubuntu-sso-client (Ubuntu):
status: Triaged → Won't Fix
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers