Defect #3780
closed
Attribute exchange with OpenID providers
Added by Gábor Molnár about 15 years ago.
Updated almost 3 years ago.
Description
Redmine should "include the attribute exchange parameters to authentication requests to access user information (such as name and email)" (quote: Google OpenID documentation), and i think this not what our OpenID implementation does now. As of r2847 , the attribute exchange doesnt work with Google accounts (this id the only provider i tried), and i think this is a major usability issue with the recent state of OpenID support.
Files
The OpenID support as it is now is useless.
Please provide a way to define the required user details or enable only the bare basic openid support (just to allow a user to log in).
I would also rise the priority for this issue, though, hope it won't take months to be solved.
Thank you in advance.
- Status changed from New to Resolved
Here's a work around (dirty, lazy hack) which works for us with Launchpad's, WordPress's, Yahoo's OpenID.
Patch here: http://gist.github.com/179159
- Assignee set to Eric Davis
+1 -- the patch is about the same hack I made, but seeing something more robust built in would be nice.
Bump!
And soon we make an year.
- Status changed from Resolved to New
- Assignee deleted (
Eric Davis)
Stas:
Redmine is developed by a group of volunteers. This hasn't been a high priority feature, which might be why no one has contributed their free time to build a more robust system for this.
Since this is important for me, I might consider spending some time/$ for coding/testing, if you could guide me what exactly is to be expected from existing patch/features making it a possible fix.
I agree with you and I know what volunteering means, but this was more like an ignorance.
Is there any progress in this case or I have some wrong settings? This doesn't look very well ;?(
Redmine 1.0.3.stable.4425 (MySQL)
- Category set to Accounts / authentication
- Category changed from Accounts / authentication to OpenID
- % Done changed from 0 to 100
Antoine Beaupré wrote:
there is a fix for this: http://projects.andriylesyuk.com/projects/openid-fix
why isn't this factored in?!
I don't see the fix you refer to, Antoine. (Although, it could have been removed in the last year.) The only changes I see are in the repository and they involve allowing manual versus on-the-fly creation of users upon login, which Redmine provides currently and doesn't solve the problem this ticket identifies.
As this is relevant, I posted a patch here => http://www.redmine.org/issues/11778 <= that handles AX (Attributes Exchange) and works to auto-register users on Google and Yahoo (and probably others, but I only tested those two). I provide it more as an example of what needs to be done, but if it were to be pulled in, it does work better than the current implementation.
As well, if you like what you see and would like me to test & verify it across several OpenID providers (not just Google & Yahoo) and modify the code to include additional AX attributes as necessary, I can definitely do that and repost!
Direct ref to an issue with a patch: #11778.
- Status changed from New to Closed
- Resolution set to Wont fix
The OpenID support has been dropped by #35755 for the upcoming Redmine 5.0.0.
Also available in: Atom
PDF