Bug #7388: blank page /idp/saml2/continue - Authentic 2 - Entr'ouvert Projects — Projets d'Entr'ouvert

Bug #7388

blank page /idp/saml2/continue

Added by Frédéric Péters about 4 years ago. Updated over 1 year ago.

Status:

Fermé

Priority:

Normal

Assignee:

Benjamin Dauvergne

Category:

Target version:

2.2.0

Start date:

27 May 2015

Due date:

% Done:

100%

Patch proposed:

Planning:

Description

After an account has been created we get redirected to that URL that shows a blank page. (this happened to Pierre on imio.entrouvert.org, but I think I also got it on maarch.dev.entrouvert.org).

0001-auth_frontends-build-next-URL-passed-to-registration.patch View (2.8 KB) Benjamin Dauvergne, 30 May 2015 01:40 AM

Associated revisions

Revision e941b39a (diff)
Added by Benjamin Dauvergne about 4 years ago

auth_frontends: build next URL passed to registration by adding the nonce

fixes #7388

Revision a3763d2b (diff)
Added by Benjamin Dauvergne over 2 years ago

Resolution of #7610 broken the behaviour of the registration_url template
variables introduced in #7388.

History

#1 Updated by Benjamin Dauvergne about 4 years ago

Assignee set to Serghei Mihai
Target version set to 2.2.0

#2 Updated by Serghei Mihai about 4 years ago

The nonce parameter is lost during the registration process.

I see two variants:

try to preserve the nonce in the registration token which by consequence will be much longer
ignore the missing nonce and redirect user to homepage

#3 Updated by Thomas Noël about 4 years ago

Serghei Mihai a écrit :

ignore the missing nonce and redirect user to homepage

I think we should try to redirect the user to the first site. Can we store the nounce in a cookie, for 3 ou 4 hours ? On redirect, use the cookie-nounce if it's here (tipical use case: the user registers and validates his account in the same session of the same browser, in less than 30 min). If the nounce is not here, redirect to 'account_management'. Best effort...

(I don't know about security issues with this process)