[Plugin: OpenID] Auth Cookie getting ignored as of 3.0.2
-
My openid provider still works as I was able to verify. But 3.0.2 seems to have changed something so that the authentication cookie is no longer recognized by wordpress.
OpenID Authentication with google profile seems to work at first, entered an openid on the login page and clicked login.
(first calls to going to google omitted) here we already get redirected back to the site
GET /wp-login.php?finish_openid=1&identity_url=http%3A%2F%2Fwww.google.com%2Fprofiles%2Foliver.drobnik&redirect_to=https://www.pasching.cc/wp-admin/&_wpnonce=cb6e517964 HTTP/1.1
Host: https://www.pasching.cc
Accept-Encoding: gzip, deflate
Accept-Language: en-us
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-us) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Cookie: wordpress_test_cookie=WP+Cookie+check; PHPSESSID=rmfbjc1ahsct46obcbir47oqm4; __utmb=227347100.1.10.1291407096; __utmc=227347100; __utma=227347100.287876514.1291407096.1291407096.1291407096.1; __utmz=227347100.1291407096.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Connection: keep-alivethe response is a redirection to the profile page:
HTTP/1.1 302 Found
Date: Fri, 03 Dec 2010 20:12:06 GMT
Server: Apache
X-Powered-By: PHP/5.2.10
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Last-Modified: Fri, 03 Dec 2010 20:12:06 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=/; domain=www.pasching.cc
Set-Cookie: wordpress_223f4c4bf5f4b82894a57841f94f85d5=%7C1291579926%7C0f652ced6dfd204083396c5c988a84e3; path=/wp-content/plugins; domain=www.pasching.cc; httponly
Set-Cookie: wordpress_223f4c4bf5f4b82894a57841f94f85d5=%7C1291579926%7C0f652ced6dfd204083396c5c988a84e3; path=/wp-admin; domain=www.pasching.cc; httponly
Set-Cookie: wordpress_logged_in_223f4c4bf5f4b82894a57841f94f85d5=%7C1291579926%7C18f6203016f04a21ebf00e87c681cd90; path=/; domain=www.pasching.cc; httponly
Location: https://www.pasching.cc/wp-admin/profile.php
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8you can clearly see the Set-Cookie for the login, BUT ….
GET /wp-admin/profile.php HTTP/1.1
Host: https://www.pasching.cc
Accept-Encoding: gzip, deflate
Accept-Language: en-us
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-us) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Cookie: wordpress_223f4c4bf5f4b82894a57841f94f85d5=%7C1291579926%7C0f652ced6dfd204083396c5c988a84e3; wordpress_logged_in_223f4c4bf5f4b82894a57841f94f85d5=%7C1291579926%7C18f6203016f04a21ebf00e87c681cd90; wordpress_test_cookie=WP+Cookie+check; PHPSESSID=rmfbjc1ahsct46obcbir47oqm4; __utmb=227347100.1.10.1291407096; __utmc=227347100; __utma=227347100.287876514.1291407096.1291407096.1291407096.1; __utmz=227347100.1291407096.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Connection: keep-aliveThe wp-profile page ignores the Cookies!!! Instead it redirects back to the login page with appended reauth
HTTP/1.1 302 Found
Date: Fri, 03 Dec 2010 20:12:07 GMT
Server: Apache
X-Powered-By: PHP/5.2.10
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Last-Modified: Fri, 03 Dec 2010 20:12:07 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
Location: https://www.pasching.cc/wp-login.php?redirect_to=http%3A%2F%2Fwww.pasching.cc%2Fwp-admin%2Fprofile.php&reauth=1
Content-Length: 0
Connection: close
Content-Type: text/htmlI also briefly enabled debug mode and on the login page I get this message related to openid on the login page:
Warning: Call-time pass-by-reference has been deprecated in /var/www/vhosts/drobnik.com/httpdocs/wp-content/plugins/openid/Auth/OpenID/Server.php on line 1707
Might be unrelated but calling deprecated methods cannot be good at any rate.
kind regards
Oliver Drobnik
- The topic ‘[Plugin: OpenID] Auth Cookie getting ignored as of 3.0.2’ is closed to new replies.