Skip to content
This repository has been archived by the owner on May 28, 2024. It is now read-only.

openid login does not work for openid accounts without e-mail #4

Open
asaladin opened this issue Jul 24, 2013 · 3 comments
Open

openid login does not work for openid accounts without e-mail #4

asaladin opened this issue Jul 24, 2013 · 3 comments

Comments

@asaladin
Copy link
Contributor

some openid providers don't send user email along with authentication credentials.
This can lead to an internal server error since the velruse endpoint try to read an e-mail.

@osallou
Copy link
Member

osallou commented Jul 24, 2013

Mobyle will expect to have email. Velruse should ask to get it, but if provider (or user) does not provide it, authentication is expected to fail.

This should not raise an internal error however.
login_complete_view should in this case test the value (not None) and route to authentication failure HTTP.

If it fails in Velruse, we should try to fix it and ask for a pull request.

@asaladin
Copy link
Contributor Author

It's our code that fails with the internal error.

If we also provide a classic "login/password" way to register maybe we can reuse the same logic to ask for a valid e-mail for openid providers that don't pass an email ?

@osallou
Copy link
Member

osallou commented Jul 24, 2013

Something like:

.....
openid authentication is ok
....
If email is None:
    if user[email] is not None:
        route to authenticated
    else:
    route to a page asking for an email
    then send email and wait for mail confirmation
    at email confirmation create user and store email

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants