I just released dblogin 1.1 to fix two issues:

  1. #1786998: Don't default to aegir.koumbit.net
  2. #1426432: Check for HTTPS

This makes the module more secure and platform-agnostic. It should still work on our sites (i tested the openid provider), and should alleviate the concerns about security with this module.

The release nodes:

Comments

j0nathan’s picture

Assigned: Unassigned » j0nathan
Status: Active » Fixed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

  • Commit 9ceb640 on 7.x-6.x, 8.x-1.x, 8.x-2.x, lock by j0nathan:
    Issue #1864178 : upgrade to dblogin 1.1.