OpenID does not always work without clean paths and a different language enabled
taroza - July 12, 2008 - 16:13
| Project: | OpenID |
| Version: | HEAD |
| Component: | OpenID Client |
| Category: | bug report |
| Priority: | critical |
| Assigned: | Unassigned |
| Status: | active |
Jump to:
Description
Initially I described the problem here (appeared to be a different issue).
My setting:
- Drupal 6.2
- openid module enabled
- Clean URLs are not configured
- lt language enabled
- site name: site-dev
Now when I open the site-dev/index.php I am normally brought to http://localhost/site-dev/?q=lt
The problem appears to happen at least with MyOpenID provider. The steps I take:
- Navigate to http://localhost/site-dev/?q=lt
- Try to login with evaldas.taroza.myopenid.com
- The error appears:
The request was not a valid OpenID request. While processing the
request, the following error occurred: return_to
u'http://localhost/site-dev/?q=lt/openid/authenticate&destination=node'
not under trust_root u'http://localhost/site-dev/?q=lt'
I contacted the MyOpenID supprt and they directed me to the OpenID spec. saying that values in the return_to must not be different than for those in the trust_root.
As the error message shows the values of q are different.
When I disabled the lt language, I was able to properly login using MyOpenID.
#1
I cannot get openid to work at all either with cleanurl's or not. I believe the problem does have to do with languages. I cannot test this because when I try to disable the transition module the whole site stops working.
For some reason I don't get that helpful of a error page either. It just redirects me to the homepage, but that is probably due to a different problem.
If i delete the everything after "openid.claimed_id" (inclusive) it redirects me to the homepage and displays the error. Otherwise it does not.
I forgot to mention that I am using drupal 5.
#2
Ref. this issues: (some configurations works)
"OpenID form field not showing:"
http://drupal.org/node/378178
"Can't log in with OpenID using Blogger/Google"
http://drupal.org/node/273760
FYI: On various internal (non-public sites where it is possible to require the users to use a particular OpenID authenticator), I have NOT had any problems against Yahoo, even without CleanURLs on Drupal 6.3, 6.8 and 6.9.