Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix SRP auth response #124

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

3oris
Copy link

@3oris 3oris commented Jul 12, 2018

@3oris 3oris changed the title Fix SPR auth response Fix SRP auth response Jul 12, 2018
@3oris
Copy link
Author

3oris commented Jul 12, 2018

Cannot test due to

Encrypted environment variables have been removed for security reasons.
See https://docs.travis-ci.com/user/pull-requests/#Pull-Requests-and-Security-Restrictions

Copy link

@mingofmongo mingofmongo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi, @3oris , I can confirm that your fix works! Just tried it out with a client app that has client secret. Internal username (AWS's "sub") and self.username (email) are indeed different.

@bwindsor
Copy link

I can also confirm that this fix works. Please could it be merged?

@blueskycorner
Copy link

Any update ?
Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

SRP doesn't authenticate reliably with client secret
4 participants