Unable to login via multipass

loe's Avatar

loe

27 Feb, 2009 06:49 PM

I'm running a copy of tender_multipass (http://github.com/xaviershay/tender_multipass/tree/master) but shared authentication doesn't work, probably because the hashes aren't matching up.

This worked before when we were not using the tender_name key, and signing just the email, secret and timestamp. Now the name is part of the signed string but I'm not sure if you guys are computing the same value (do you check for tender_name and then calculate with that if it exists? or do you always check the same cookies).

It would appear to me that I shouldn't put the name in the string to be signed, and tender should only ever compute the signature from expires + email + secret, and all other fields are optional.

  1. 1 Posted by loe on 27 Feb, 2009 07:02 PM

    loe's Avatar

    http://github.com/xaviershay/tender_multipass/blob/4671ad11cf9d0aecbff9b5ea9c7e50f5f3a0844c/lib/tender/multi_pass.rb#L37

    Should this have the name?

  2. Support Staff 2 Posted by Courtenay on 27 Feb, 2009 08:06 PM

    Courtenay's Avatar

    Use my fork of multipass

    ============ Courtenay (310) 294-4026

      ^{0,o}'
    

    On Feb 27, 2009, at 10:49 AM, Tender Support [email blocked]
    wrote:

  3. 3 Posted by loe on 27 Feb, 2009 09:56 PM

    loe's Avatar

    xaviershay's code is a fork of yours, and it has the logout code.

  4. 4 Posted by loe on 27 Feb, 2009 09:56 PM

    loe's Avatar

    Also, how did you post before me (12:06AM?) perhaps that should be a pm?

  5. 5 Posted by kamal on 28 Feb, 2009 02:35 AM

    kamal's Avatar

    I fixed a bug in the plugin when you use the name field. http://github.com/kamal/tender_multipass/commit/e46770a072cd31340f8dc63c79f5d8633ccc873d

  6. Support Staff 6 Posted by Courtenay on 28 Feb, 2009 03:19 AM

    Courtenay's Avatar

    Hey, I updated the tender_multipass plugin with everyone's contributions! Everything should be working now :)

Discussions are closed to public comments.
If you need help with Tender please start a new discussion.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac

Recent Discussions

14 Oct, 2019 04:05 AM
14 Oct, 2019 12:43 AM
21 Sep, 2019 02:33 PM
27 Aug, 2019 05:35 PM
15 Aug, 2019 01:56 AM