summaryrefslogtreecommitdiff
path: root/plugins/OpenID
AgeCommit message (Collapse)Author
2010-12-16Merge branch '0.9.x' into 1.0.xBrion Vibber
Conflicts: plugins/CacheLog/locale/nb/LC_MESSAGES/CacheLog.po
2010-12-16Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-12-07Merge branch '0.9.x' into mergeBrion Vibber
Conflicts: README actions/hostmeta.php classes/File_redirection.php lib/common.php lib/designsettings.php lib/router.php lib/util.php lib/xmppmanager.php plugins/OStatus/OStatusPlugin.php
2010-12-01Fix for ticket #2911: Hitting enter on the "associate with current account" ↵Brion Vibber
in OpenID flow failed due to forms being mixed together Separating the two forms (one to create a local account, the other to attach the OpenID to an existing account) gets them working -- enter activates the appropriate default button.
2010-12-01Fix dumb mistake -- changed function names partway through writing Nickname ↵Brion Vibber
and forgot to update a couple places. :)
2010-12-01add OpenID data to the Webfinger XRD file so you can login with it elsewhereEvan Prodromou
2010-11-30Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-11-29Merge branch 'namecase' into 0.9.xBrion Vibber
2010-11-29Work in progress on nickname validation changes. lib/nickname.php appears to ↵Brion Vibber
have been destroyed by NetBeans and will be rewritten shortly. Sigh.
2010-11-29Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-10-28Merge branch '0.9.x' into 1.0.xBrion Vibber
2010-10-28Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-10-25Merge branch '0.9.x' into 1.0.xBrion Vibber
Conflicts: actions/subscriptions.php lib/router.php lib/xmppmanager.php lib/xmppoutqueuehandler.php
2010-10-23Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-10-22Pass OAuth authorize page's mode paramater to OpenID plugin so it can create ↵Zach Copley
a correct returnto URL
2010-10-21Re-camelcase ApiOauthAuthorizeAction so it will be accessible whenZach Copley
a site is in pivate mode
2010-10-21OAuth - proper callback handling and better styling for authorizationZach Copley
page when in desktop mode
2010-10-21Update translator documentation and remove superfluous whitespace.Siebrand Mazeland
2010-10-20Pretty up the OpenID variant of the OAuth login form a bit; change the ↵Brion Vibber
'Allow' button to 'Continue' so we're not confused why we get the form again after authenticating.
2010-10-20Initial OpenID+OAuth thingy.Brion Vibber
2010-10-20Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-10-20Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-10-20Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-10-19Merge branch '0.9.x' into 1.0.xBrion Vibber
2010-10-18Localisation updates from http://translatewiki.netSiebrand Mazeland
2010-10-18Merge branch '0.9.x' into 1.0.xBrion Vibber
Conflicts: README lib/default.php
2010-10-16Use common case instead of WARNING in all caps.Siebrand Mazeland
Spotted by The Evil IP address.
2010-10-12Merge branch '0.9.x' into 1.0.xBrion Vibber
2010-10-09Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-10-08Merge branch '0.9.x' into 1.0.xBrion Vibber
2010-10-08Merge branch 'fatals' into 0.9.xBrion Vibber
2010-10-08Normalize execution guards in OpenID plugin files; avoids annoying fatal ↵Brion Vibber
errors when .php files get spidered.
2010-10-04Merge branch '0.9.x' of gitorious.org:statusnet/mainline into 1.0.xBrion Vibber
Conflicts: actions/hostmeta.php actions/imsettings.php classes/User.php lib/adminpanelaction.php lib/channel.php lib/default.php lib/router.php lib/util.php
2010-10-03Localisation updates from http://translatewiki.netSiebrand Mazeland
2010-10-01Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-09-30Fix for OpenID-only private sites: we were removing the 'login' and ↵Brion Vibber
'register' actions from the routing system entirely, which meant that login links & redirects from unauthenticated views on private sites (as well as various re-auth situations even on non-private sites) would break and send to the main page instead. Changed it to leave the 'login' and 'register' actions in the system; we're already taking them over and redirecting them to the OpenID login page, so they won't be reached by accident; but now those redirects can be reached on purpose. ;) Better long-term fix may be to allow some aliasing, so we can have common_local_url('login') actually send us straight to the OpenID login page instead of having to go through an intermediate redirect, but this'll do.
2010-09-28Localisation updates from http://translatewiki.netSiebrand Mazeland
* adding the fuzzy messages back now that translatewiki.net processes them properly again.
2010-09-28Localisation updates from http://translatewiki.netSiebrand Mazeland
* first export of L10n for languages other than English. Could use some testing/QA.
2010-09-23Update POT files for plugins.Siebrand Mazeland
2010-09-19Update pot files for plugins.Siebrand Mazeland
2010-09-15Update/add pot files for plugins.Siebrand Mazeland
2010-09-09Merge branch '0.9.x' into 1.0.xEvan Prodromou
Conflicts: EVENTS.txt plugins/TwitterBridge/daemons/twitterstatusfetcher.php plugins/TwitterBridge/twitterbasicauthclient.php
2010-09-07Quick fix for #2659: unable to login with Livejournal OpenIDBrion Vibber
The Net::OpenID::Server perl module that LJ uses appears to be very picky about input, and rejects most request types unless the data comes in as GET parameters (apparently following OpenID 1.1 rules, rather than OpenID 2.0 rules which permit any request to be POSTed but requires that if so, the data must all be in the POST body). Apparently something got updated on LJ at some point that's either added that behavior or (more likely) added the OpenID 2.0 namespace info to discovery, which tells the Janrain-based OpenID libraries that they should go ahead and do POST requests instead of redirects to GET requests... thus breaking everything. ;) GET should be just fine for both 1.1 and 2.0 though, and also saves having to sit through that lame autosubmit page. Switched the authentication submission from checking whether it should redirect to GET or do a form POST, to simply always doing the redirect to GET. Tested against providers: * LiveJournal * Google * LaunchPad * identi.ca
2010-09-07Create Account Manager plugin implementing the Account Management specificationCraig Andrews
Add Account Manager support to the OpenID plugin
2010-09-07Remove CSRF protection from username/password login and from OpenID login.Craig Andrews
2010-06-26Merge branch 'testing' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
Conflicts: plugins/OpenID/openidserver.php (cleaned up mismatched comment)
2010-06-16Merge branch 'testing' into 0.9.xBrion Vibber
Conflicts: plugins/OpenID/openidserver.php
2010-06-16Switch OpenID server's redirects from 307 to 303 to avoid prompt for form ↵Brion Vibber
data resubmission if we were sent here from a POST request, such as when verifying the site for the first time doing an OpenID login from Drupal.
2010-06-07Merge branch 'testing' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
Conflicts: plugins/OpenID/openid.php
2010-05-28OpenID: add option to enable asking for a username to append to the trusted ↵Brion Vibber
provider's base URL. Good for hooking up with sites like WikiHow, where usernames are appended to a base URL to get a profile URL which is used as the provider. $config['openid']['append_username'] = true; or check 'Append a username to base URL' in OpenID admin panel.