diff options
| author | Patrick Uiterwijk <puiterwijk@redhat.com> | 2015-10-07 14:20:55 +0000 |
|---|---|---|
| committer | Patrick Uiterwijk <puiterwijk@redhat.com> | 2015-10-07 14:20:55 +0000 |
| commit | dca4e808db89e831233e8f33b3b65c524c3bb30f (patch) | |
| tree | 77164087c066b89160e6aad9e14b056fe4424fa6 | |
| parent | 161237f901e704d39eb9655cb2c2952ead91ef95 (diff) | |
| download | ansible-dca4e808db89e831233e8f33b3b65c524c3bb30f.tar.gz ansible-dca4e808db89e831233e8f33b3b65c524c3bb30f.tar.xz ansible-dca4e808db89e831233e8f33b3b65c524c3bb30f.zip | |
Move OpenId patch around
| -rw-r--r-- | roles/ipsilon/files/openid_server.py | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/roles/ipsilon/files/openid_server.py b/roles/ipsilon/files/openid_server.py index dd7657a94..21163b661 100644 --- a/roles/ipsilon/files/openid_server.py +++ b/roles/ipsilon/files/openid_server.py @@ -1043,6 +1043,12 @@ class OpenIDResponse(object): @change: 2.1.0 added the ENCODE_HTML_FORM response. """ if self.request.mode in BROWSER_REQUEST_MODES: + do_post_trusts = ['http://taigastg.cloud.fedoraproject.org/', 'http://taiga.cloud.fedoraproject.org/'] + if self.request.trust_root in do_post_trusts: + # Workaround, since too many clients don't follow the spec + return ENCODE_HTML_FORM + # This is more privacy friendly, as it leaks less user data + # with OpenID urls in referal if self.fields.isOpenID1() and \ len(self.encodeToURL()) > OPENID1_URL_LIMIT: return ENCODE_HTML_FORM |