Project

General

Profile

Bug #7388

blank page /idp/saml2/continue

Added by Frédéric Péters about 4 years ago. Updated over 1 year ago.

Status:
Fermé
Priority:
Normal
Category:
-
Target version:
Start date:
27 May 2015
Due date:
% Done:

100%

Patch proposed:
No
Planning:
No

Description

After an account has been created we get redirected to that URL that shows a blank page. (this happened to Pierre on imio.entrouvert.org, but I think I also got it on maarch.dev.entrouvert.org).

0001-auth_frontends-build-next-URL-passed-to-registration.patch View (2.8 KB) Benjamin Dauvergne, 30 May 2015 01:40 AM

Associated revisions

Revision e941b39a (diff)
Added by Benjamin Dauvergne about 4 years ago

auth_frontends: build next URL passed to registration by adding the nonce

fixes #7388

Revision a3763d2b (diff)
Added by Benjamin Dauvergne over 2 years ago

login: fix bug in user of registration URL (fixes #15924)

Resolution of #7610 broken the behaviour of the registration_url template
variables introduced in #7388.

History

#1 Updated by Benjamin Dauvergne about 4 years ago

  • Assignee set to Serghei Mihai
  • Target version set to 2.2.0

#2 Updated by Serghei Mihai about 4 years ago

The nonce parameter is lost during the registration process.

I see two variants:

  • try to preserve the nonce in the registration token which by consequence will be much longer
  • ignore the missing nonce and redirect user to homepage

#3 Updated by Thomas Noël about 4 years ago

Serghei Mihai a écrit :

  • ignore the missing nonce and redirect user to homepage

I think we should try to redirect the user to the first site. Can we store the nounce in a cookie, for 3 ou 4 hours ? On redirect, use the cookie-nounce if it's here (tipical use case: the user registers and validates his account in the same session of the same browser, in less than 30 min). If the nounce is not here, redirect to 'account_management'. Best effort...

(I don't know about security issues with this process)

#4 Updated by Benjamin Dauvergne about 4 years ago

Just dont loose it.

#5 Updated by Benjamin Dauvergne about 4 years ago

  • Status changed from Nouveau to Résolu (à déployer)
  • % Done changed from 0 to 100

#6 Updated by Benjamin Dauvergne over 3 years ago

  • Status changed from Résolu (à déployer) to Solution déployée

#7 Updated by Benjamin Dauvergne over 1 year ago

  • Status changed from Solution déployée to Fermé

Also available in: Atom PDF