You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
How do people end up with a login subdomain? (It breaks OIDC issuer.) #941
This should've been stopped by the blacklist-functionality, and login is on the blacklist.
Perhaps we haven't enforced the removal of usernames before the blacklist was put in place? Or perhaps the blacklist isn't working as intended... (I do not hope this is the case)?
Activity
dmitrizagidulin commentedon Nov 16, 2018
That’s really weird. I can’t imagine by what mechanism it would be the default! Will look.
megoth commentedon Nov 16, 2018
This should've been stopped by the blacklist-functionality, and login is on the blacklist.
Perhaps we haven't enforced the removal of usernames before the blacklist was put in place? Or perhaps the blacklist isn't working as intended... (I do not hope this is the case)?
megoth commentedon Nov 16, 2018
The PR for the blacklist is #893
kjetilk commentedon Nov 16, 2018
This was should have been in the 4.3.0 release, but perhaps the servers haven't been upgraded?
kjetilk commentedon Nov 16, 2018
Oh, reading on gitter, this doesn't seem to be about the blacklist, and not about our servers...
There's something creating that login subdomain... A bug?
mguiral commentedon Nov 16, 2018
After some investigations, i have on old .db folder with wrong provider.json configuration file. So i remove it but the page https://repo1.samy-poc.org/common/popup.html redirected me to https://login.repo1.samy-poc.org/login when i click on "Log in with repo1.samy-poc.org" button and now i have an unauthorized message.
Hope that helps
mguiral commentedon Nov 16, 2018
Ok now it's working. So i just have to delete the .db folder.
Thanks a lot for your time
kjetilk commentedon Nov 16, 2018
OK, great! However, could there have been a bug here that caused it to create a login host to begin with?
mguiral commentedon Nov 16, 2018
I think it will be great to delete .db folder when new solid init command line is running
mguiral commentedon Nov 16, 2018
You can close it