My assumption is that OpenID just checked the client_id server side and
not the origin URL.
I will need to check what are the posibilities in OIDC as it needs
different redirect_uri for each instance as well. Maybe it could be
defined as template or regex in the definition. I'm not expert on
Ipsilon, so I need to check the options.
Michal
On 28. 06. 24 9:14, Neal Gompa wrote:
On Fri, Jun 28, 2024 at 9:04 AM Michal Konecny <mkonecny@xxxxxxxxxx> wrote:
I can see what is happening here, in OIDC we have entry only for
lists.fedoraproject.org.
I created a ticket on infra tracker for you
https://pagure.io/fedora-infrastructure/issue/12013, but I'm not sure
how to solve this as the OIDC entry is shared between all instances and
it doesn't allow us to have more client URLs than one. As workaround you
can use lists.fedoraproject.org for now, the list can be found there as
well
https://lists.fedoraproject.org/archives/list/firewalld-users@xxxxxxxxxxxxxxxxxxxxxx/
How did the custom FAS/OpenID plugin work around this? I know it
worked with that deployment...
--
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
