Discarded login form values

EgonO - December 21, 2008 - 15:52
Project:OpenID
Version:5.x-1.2
Component:OpenID Client
Category:bug report
Priority:critical
Assigned:Unassigned
Status:needs review
Description

If i activate the OpenID-Module and the Remember Me Module the OpenID-Form is empty - the OpenID-field is missing...

#1

nickl - December 23, 2008 - 16:14

Assuming OpenID module refers to: http://drupal.org/project/openid

Will look into this issue...

#2

daphisto - March 31, 2009 - 20:42

Just wondering if there was any movement on this?

#3

nickl - May 16, 2009 - 07:51
Title:Doesn't work with OpenID enabled» OpenID - User forgotten after openid auth

Testing with openid.
Field displays and authentication works, see attachment for screenshot of login form.
D6 works as expected.
D5 user is not remembered after closing browser when authenticated via openid.

Will look into this when I get a moment...

AttachmentSize
Picture 6.png 18.14 KB

#4

nickl - May 17, 2009 - 13:33
Title:OpenID - User forgotten after openid auth» Discarded login form values
Project:Remember me» OpenID
Version:5.x-2.0-alpha1» 5.x-1.2
Component:Code» OpenID Client
Priority:normal» critical
Status:active» needs review

The problem lies with openid module discarding the form_values which the D6 version does not do.

When OpenID authentication succeeded and user already exists user_login_submit gets called, which in turns processes hook_user op = login, with empty form_values. The D6 core version of openid stores the submitted form_values in $_SESSION['openid']['user_login_values'], before redirecting to the OpenID provider, which gets passed on to the login chain again after authentication. The attached patch duplicates this functionality, rolled against version 5.x-1.2.

Assigning issue to openid project, please apply patch and provide a new version for D5.x users to download.

AttachmentSize
login_submit-openid-5.x-1.2.patch 2.03 KB

#5

nickl - June 2, 2009 - 08:59

Has anyone had a look at this yet?
It's a straight forward patch an mimics the behaviour of the 6.x version so I expect no debates to follow. If there is anything I can do to be of assistance, please shout.

 
 

Drupal is a registered trademark of Dries Buytaert.