Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

invalid credentials when using omniauth v1.1.1 #19

Open
gautamrege opened this issue Nov 28, 2012 · 0 comments

Comments

Projects
None yet
1 participant
@gautamrege
Copy link
Member

commented Nov 28, 2012

Omniauth v1.1.1 with omniauth-oauth2 gem creates problems.

http://blog.joshsoftware.com/2010/12/16/multiple-applications-with-devise-omniauth-and-single-sign-on/#comment-5559

Apparently omniauth v1.1.1 now has a "state" param that is used for CSRF checks. This breaks the code in SSO callback. A downgrade to v1.1.0 solves this but we need to fix this for the upgrade.

https://gist.github.com/1d9dcceebeb0e50046f4 shows the callback with state param and this links talks about the state param omniauth/omniauth-oauth2#18

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.