XRDS for launchpad users missing local id

Bug #501731 reported by Brian Muller
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
Low
Unassigned

Bug Description

The user profile pages (like https://launchpad.net/~bamuller for instance) have a X-XRDS-Location specified in a meta element. The resulting XRDS document (mine is found here, for instance: https://login.launchpad.net/+id/wBDcJtN/+xrds ) does not contain a LocalID element with the user's local id, as it should. This value should be the same as the link href used in the user's profile page for openid.delegate and openid2.local_id. For instance, my XRDS document currently has:
    <Service priority="0">
      <Type>http://specs.openid.net/auth/2.0/signon</Type>
      <URI>https://login.launchpad.net/+openid</URI>
    </Service>

When it should have:
    <Service priority="0">
      <Type>http://specs.openid.net/auth/2.0/signon</Type>
      <URI>https://login.launchpad.net/+openid</URI>
      <LocalID>https://login.launchpad.net/+id/wBDcJtN</LocalID>
    </Service>

When that LocalID is not given, the OpenID redirection URL is crafted with the wrong openid.identity, and you get the error reported at https://bugs.launchpad.net/launchpad/+bug/451619 .

Revision history for this message
Curtis Hovey (sinzui) wrote :

The error cited was because of a improper implementation on sourceforge's side. The HTTP headers take precedence, and they were being ignored.

affects: launchpad → launchpad-foundations
Changed in launchpad-foundations:
importance: Undecided → Low
status: New → Triaged
Revision history for this message
Brian Muller (bamuller) wrote :

To clarify, you get the same result (i.e., users can't log in using the ID you provide) - though caused for a different reason.

This bug does prevent people from signing into sites that use OpenID auth with Yadis support. If your XRDS documents are incorrect, then one option would be to just remove the meta element from your identity pages until it is fixed. That way users can then log in to sites that propperly support Yadis.

William Grant (wgrant)
tags: added: openid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.