joshsoftware / joshsoftware/sso-devise-omniauth-provider
invalid credentials when using omniauth v1.1.1
Open
- Dominant language
- Ruby
- Stars
- 248
- Forks
- 72
- PR merge metrics
- No merged PRs in 30d
Description
Omniauth v1.1.1 with omniauth-oauth2 gem creates problems.
http://blog.joshsoftware.com/2010/12/16/multiple-applications-with-devise-omniauth-and-single-sign-on/#comment-5559
Apparently omniauth v1.1.1 now has a "state" param that is used for CSRF checks. This breaks the code in SSO callback. A downgrade to v1.1.0 solves this but we need to fix this for the upgrade.
https://gist.github.com/1d9dcceebeb0e50046f4 shows the callback with state param and this links talks about the state param https://github.com/intridea/omniauth-oauth2/pull/18
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.