[openstreetmap/openstreetmap-website] Unable to log in via OpenID (#3131)

Tom Hughes notifications at github.com
Sun Mar 14 12:04:46 UTC 2021

Yes the filter was correct when it was added but there was a recent change in a third party component to address a security issue which means that the authentication is now done as POST instead of GET which changes the behaviour of the filter.

Importantly it only changes the behaviour in some browsers - there was no problem in Firefox for example because that only applies the form-action rule to the original URL on the form but Chrome also applies it to any redirect and hence was refusing the redirection to the OpenID provider.

You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20210314/1305dc0b/attachment.htm>

More information about the rails-dev mailing list