Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Google signin not working (uses return url of HTTPS instead of HTTP)
I've got Google/OpenId enabled on my site. When I click the button to use google signin, it opens up a new window to google that says "The Page you requested is invalid."
After looking at the URL, there's a portion in there that says "return_to=http://www.moonlitzwave.com/forums/index.php?p=%2Fentry%2Fconnect%2Fopenid&display=popup&Target=%2F&openid.realm=https://www.moonlitzwave.com..."
Notice that the openid.realm is https but it should be http. Indeed, if I copy that URL and change it to http, it works great.
Is there a fix for this or is my only option to use HTTPS?
After looking at the URL, there's a portion in there that says "return_to=http://www.moonlitzwave.com/forums/index.php?p=%2Fentry%2Fconnect%2Fopenid&display=popup&Target=%2F&openid.realm=https://www.moonlitzwave.com..."
Notice that the openid.realm is https but it should be http. Indeed, if I copy that URL and change it to http, it works great.
Is there a fix for this or is my only option to use HTTPS?
Tagged:
0
Answers
I can confirm this. It appears that even on your own site I can't google login.
A year later and this is still an issue?
Fix here: http://vanillaforums.org/discussion/14103/sign-in-with-google-plugin-not-working
Still pretty lame that it hasn't been patched. How would one go about submitting a fix for this?
It has been "fixed" as of 2.1
Redirect the falsified code to the correct one and the bug would be fixed :-P