Bug #7042: "cancel" button erroneously displayed on login page - Authentic 2 - Redmine Entr’ouvert

Bug #7042

"cancel" button erroneously displayed on login page

Ajouté par Frédéric Péters il y a environ 9 ans. Mis à jour il y a plus de 6 ans.

Statut:

Fermé

Priorité:

Normal

Assigné à:

Benjamin Dauvergne

Catégorie:

Version cible:

2.2.0

Début:

25 avril 2015

Echéance:

% réalisé:

100%

Temps estimé:

Patch proposed:

Non

Planning:

Description

Steps to reproduce:

be on login page (ex: https://idp-test-entrouvert.montpellier3m.fr/login/), there's no "Cancel" button
visit password reset page (ex: https://idp-test-entrouvert.montpellier3m.fr/accounts/password/reset/)
click "Back"
there's now a "Cancel" button on the login page
click "Cancel" and you get a blank page (302 then http code 400 on idp/saml2/continue?cancel)

Demandes liées

Révisions associées

Révision 569926ec (diff)
Ajouté par Benjamin Dauvergne il y a presque 9 ans

views: when the user cancel a login pass a cancel parameter but also the nonce to the next URL (fixes #7042)

Révision 6687ba21 (diff)
Ajouté par Benjamin Dauvergne il y a presque 9 ans

views: when the user cancel a login pass a cancel parameter but also the nonce to the next URL (fixes #7042)

Révision 9c8e5e16 (diff)
Ajouté par Benjamin Dauvergne il y a presque 9 ans

views: when the user cancel a login pass a cancel parameter but also the nonce to the next URL (fixes #7042)

Révision cedb8db9 (diff)
Ajouté par Benjamin Dauvergne il y a presque 9 ans

views: fix cancel action on login (fixes #7042)

When the user cancel a login pass a cancel parameter but also the nonce
to the next URL.

Historique

Mis à jour par Benjamin Dauvergne il y a presque 9 ans

What happens is that the back link from reset page goes to '/' which redirects to combo, which requests a login through SAML, which produces the Cancel button since an user is always allowed to refuse to login.

One clear bug is that the cancel button seems to not work anymore, it calls for some tests on the SAML IdP.