OpenID redirect loops when already signed in on another tab
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Apache OpenID |
New
|
Undecided
|
Unassigned | ||
| Launchpad itself |
Invalid
|
Undecided
|
Unassigned | ||
Bug Description
When you open up a few tabs for something that requires OpenID, and sign into one of them, when signing in on the next one, it tells you that are already signed in, and gives you a "continue" button. That buttons takes you to sign in again, so it's a loop.
There may be a few different fixes for this, but one I can think of, is that the continue button take you to the page you're going instead.
From dupe files by barry:
There's a bug somewhere in either the apache-openid module or in the LaunchpadLogin Service which can send you into an openid login loop. Here are Kiko's steps to reproduce:
* Restart your browser
* Load two pastebin URLs without logging in
* Log into one and get to the pastebin
* Log into the second and you get stuck in a loop
* Reload the second pastebin and you get to it
It's not yet clear to me where the bug is, though I suspect it's related to the session managed by apache-openid. I need to verify whether or not pastebin is protected by the latest apache-openid module we're using for private archives.
| description: | updated |
| Changed in launchpad-foundations: | |
| status: | New → Triaged |
| Barry Warsaw (barry) wrote | #1 |
| Changed in launchpad-foundations: | |
| status: | Triaged → Invalid |
Ah, I wonder why my bug search didn't find this earlier one.
Thanks for collapsing the dupes. What's interesting is that this original bug predates the deployment of my changes to apache-openid, so I'm relieved at least that I didn't break it. :)
I still suspect it's a fubar in the apache-openid session management.