Download & Extend
OpenID Selector » Issues

OpenID login failed. when using with SecurePages

Posted by kenorb on March 15, 2011 at 12:09pm
Project:OpenID Selector
Version:6.x-1.x-dev
Component:Code
Category:support request
Priority:normal
Assigned:Unassigned
Status:closed (fixed)

Issue Summary

When trying to log in using Google OpenID, I've got error:

OpenID login failed.

URL workflow:

POST /user
GET /openid/authenticate?destination=user&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.mode=id_res&openid.op_endpoint=https%3A%2F%2Fwww.google.com...(long)
GET (the same as above)
GET /user
GET /user (this one does redirect)

Redirection code:
<code>

<html><head><title>OpenID redirect</title></head>
<body><form action="https://www.google.com/accounts/o8/ud"  accept-charset="UTF-8" method="post" id="openid-redirect-form">
<div><input type="hidden" name="openid.ns" id="edit-openid.ns" value="http://specs.openid.net/auth/2.0"  />
<input type="hidden" name="openid.mode" id="edit-openid.mode" value="checkid_setup"  />
<input type="hidden" name="openid.identity" id="edit-openid.identity" value="http://specs.openid.net/auth/2.0/identifier_select"  />
<input type="hidden" name="openid.claimed_id" id="edit-openid.claimed-id" value="http://specs.openid.net/auth/2.0/identifier_select"  />
<input type="hidden" name="openid.assoc_handle" id="edit-openid.assoc-handle" value="AOQobUdKzMF7mLg02XQrHGiPh4QyCI2GzIsT2VqNr1pKHHVMTfyAAP8g"  />
...

Params:

destination user
openid.assoc_handle AOQobUdKzMF7mLg02XQrHGiPh3QyCI2GzIsT2VqNr1pKHHVMTfyAAP9g
openid.claimed_id https://www.google.com/accounts/o8/id?id=AItOawnpqmc2cParh-YfRUcSwdE2Vi-... https://www.google.com/accounts/o8/id?id=AItOawnpqmc2cParh-YfRUcSwdE2Vi-... id_res
openid.ns http://specs.openid.net/auth/2.0
openid.op_endpoint https://www.google.com/accounts/o8/ud
openid.response_nonce 2011-03-15T12:01:45Z71xw0YNb9kj-XA
openid.return_to https://dev.xxx.uk/openid/authenticate?destination=user
openid.sig 2GKVJLfPT6xjtZxfQ12458QIIY0=
openid.signed op_endpoint,claimed_id,identity,return_to,response_nonce,assoc_handle

How to find out what's the problem?

Login or register to post comments

Comments

#1

Posted by kenorb on March 15, 2011 at 12:19pm

On my local environment it does work.
Maybe because openid.return_to is HTTPS, and on my local I've HTTP?

URL workflow when it does work on my local:

POST /user
GET /openid/authenticate?destination=user&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.mode=id_res&openid.op_endpoint=https%3A%2F%2Fwww.google.com...(long)
GET /user/register?destination=user

Sounds like bug for me.

#2

Posted by andriy_gerasika on March 16, 2011 at 10:31pm

please check your local setup is not blocking SSL.
for more details, please check http://drupal.org/node/936208

#3

Posted by andriy_gerasika on March 16, 2011 at 10:32pm
Status:active» postponed (maintainer needs more info)

#4

Posted by kenorb on March 17, 2011 at 8:45am
Title:OpenID login failed. on Google Connect» OpenID login failed. when using with SecurePages
Status:postponed (maintainer needs more info)» fixed

Thank you for your help..
It looks like there is incompatibility with SecurePages when there is an option: 'Switch back to http pages when there are no matches' activated.
When I deactivated this option, it started to work.

The solution is to add following page:

openid/authenticate

into 'Ignore page' list at /admin/build/securepages

#5

Posted by System Message on March 31, 2011 at 8:51am
Status:fixed» closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

#6

Posted by Vacilando on July 21, 2011 at 5:04pm

@kenorb, thank you for the solution in #4. I almost gave up on OpenID Selector because of this problem with https but saw and tested your solution in the last moment.

It would be good if the Openid Selector module maintainer could include this on the project page or in the installation instructions.

nobody click here