summaryrefslogtreecommitdiff
path: root/plugins/OpenID/openid.php
AgeCommit message (Collapse)Author
2010-09-07Quick fix for #2659: unable to login with Livejournal OpenIDBrion Vibber
The Net::OpenID::Server perl module that LJ uses appears to be very picky about input, and rejects most request types unless the data comes in as GET parameters (apparently following OpenID 1.1 rules, rather than OpenID 2.0 rules which permit any request to be POSTed but requires that if so, the data must all be in the POST body). Apparently something got updated on LJ at some point that's either added that behavior or (more likely) added the OpenID 2.0 namespace info to discovery, which tells the Janrain-based OpenID libraries that they should go ahead and do POST requests instead of redirects to GET requests... thus breaking everything. ;) GET should be just fine for both 1.1 and 2.0 though, and also saves having to sit through that lame autosubmit page. Switched the authentication submission from checking whether it should redirect to GET or do a form POST, to simply always doing the redirect to GET. Tested against providers: * LiveJournal * Google * LaunchPad * identi.ca
2010-06-07Merge branch 'testing' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
Conflicts: plugins/OpenID/openid.php
2010-05-28OpenID: add option to enable asking for a username to append to the trusted ↵Brion Vibber
provider's base URL. Good for hooking up with sites like WikiHow, where usernames are appended to a base URL to get a profile URL which is used as the provider. $config['openid']['append_username'] = true; or check 'Append a username to base URL' in OpenID admin panel.
2010-05-27Merge branch 'testing' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
Conflicts: lib/language.php plugins/OpenID/finishaddopenid.php
2010-05-27Merge branch 'master' of gitorious.org:statusnet/mainline into testingBrion Vibber
2010-05-25WikiHowProfile plugin; pulls avatar from WikiHow profile pages when ↵Brion Vibber
registering or adding account with OpenID. (Full name, location, homepage, and bio are also on the profile page but not marked up in a way they can be easily retrieved yet.) OpenID plugin: Added events at OpenID account creation and update time to allow additional customizations for particular sites.
2010-05-19Merge branch 'testing' into 0.9.xBrion Vibber
Conflicts: plugins/OpenID/openidlogin.php
2010-05-18OpenID access control options: trusted provider URL, Launchpad team ↵Brion Vibber
restrictions. Added an admin panel for setting these and OpenID-only mode, off by default. To enable the admin panel: $config['admin']['panels'][] = 'openid'; Or to set them manually: $config['openid']['trusted_provider'] = 'https://login.ubuntu.net/'; $config['openid']['required_team'] = 'my-project-cabal'; $config['site']['openidonly'] = true; OpenID-only mode can still be set from addPlugin() parameters as well for backwards compatibility. Note: if it's set there, that value will override the setting from the database or config.php. Note that team restrictions are only really meaningful if a trusted provider is set; otherwise, any OpenID server could report back that users are members of the given team. Restrictions are checked only at OpenID authentication time and will not kick off people currently with a session open; existing remembered logins may also survive these changes. Using code for Launchpad team support provided by Canonical under AGPLv3, pulled from r27 of WordPress teams integration plugin: https://code.edge.launchpad.net/~canonical-isd-hackers/wordpress-teams-integration/trunk
2010-04-30Update translator documentation for OpenID plugin.Siebrand Mazeland
2010-04-23Ticket #93: pretty up the auto-submit for OpenID logins a bit.Brion Vibber
* throwing in our spinner * cleanup of texts * "If this doesn't go through click the button" instead of just a mystery button * slightly faster submission: immediate at end of page rather than waiting for jQuery to confirm document setup completion
2010-03-25add whitelist and blacklist for openid URLsEvan Prodromou
2010-03-25remove debugging callsEvan Prodromou
2010-03-12OpenID fixes:Brion Vibber
- avoid notice spew when checking sreg items that weren't provided - fix keys spec for user_openid, clears up problems with removing openid associations - fix keys spec for user_openid_trustroot
2009-12-08New _m() gettext wrapper with smart detection of plugin domains. Plugin base ↵Brion Vibber
class registers your gettext files if present at initialization. update_pot.sh replaced with update_po_templates.php which can do core, plugins, or all (default). Top-level Makefile added to build .mo files for plugins as well as core. As described on list: http://lists.status.net/pipermail/statusnet-dev/2009-December/002869.html
2009-11-13Fix regression in OpenID autosubmit page.Brion Vibber
Since core JS loads were moved to the bottom, the JavaScript was being run before jQuery was loaded, so the onload event never got set. Moved it down to the scripts section.
2009-11-09Revert "Remove more contractions"Brion Vibber
This reverts commit 5ab709b73977131813884558bf56d97172a7aa26. Missed this one yesterday...
2009-11-08Merge branch '0.9.x' of git://gitorious.org/statusnet/mainline into 0.9.xSiebrand Mazeland
2009-11-08Remove more contractionsSiebrand Mazeland
* doesn't * won't * isn't * don't
2009-11-08Revert "* [Cc]an't -> [Cc]annot"Brion Vibber
This reverts commit 0ab17f382b9993ada3d12d4cdace72cca53fb545.
2009-11-08* [Cc]an't -> [Cc]annotSiebrand Mazeland
* [Cc]ould't -> [Cc]ould not
2009-10-29Moved the public XRDS from the OpenID plugin to coreCraig Andrews
Added 4 new events involved in XRDS: StartUserXRDS, EndUserXRDS, StartPublicXRDS, EndPublicXRDS Added OpenID provider functionality (no delegation support [yet])
2009-10-26Make email domain checking optional, as some statusnet installations (such ↵Craig Andrews
as those behind restrictive corporate firewalls, or on home systems on restrictive connections) cannot connect to any mail systems, and this check will always fail.
2009-08-27Merge branch '0.8.x' into 0.9.xEvan Prodromou
Conflicts: EVENTS.txt actions/finishremotesubscribe.php actions/postnotice.php actions/public.php actions/remotesubscribe.php actions/showstream.php actions/updateprofile.php actions/userauthorization.php classes/laconica.ini lib/common.php lib/oauthstore.php lib/omb.php
2009-08-04fix require paths for OpenID plugin filesEvan Prodromou
2009-08-04Move OpenID-related files to OpenID plugin directoryEvan Prodromou
As a first step to pluginizing our OpenID support, I've moved the important OpenID-related files to a dedicated plugin directory. Many of these classes are still referred to by libraries that are still in core.