Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-28740

OpenID auth via Github will stop working on July 1 2020

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 10.10
    • Fix Version/s: 10.10-HF29, 11.1, 2021.0
    • Component/s: Open Id
    • Release Notes Summary:
      Nuxeo is compatible with the new authentication mechanism supported by GitHub.
    • Tags:
    • Backlog priority:
      650
    • Team:
      PLATFORM
    • Sprint:
      nxplatform 11.1.36, nxplatform 11.1.37
    • Story Points:
      0

      Description

      Clients may use https://connect.nuxeo.com/nuxeo/site/marketplace/package/openid-authentication with Github. One client who does is receiving messages from Github saying that use of access tokens as query parameters will be deprecated.

      See https://developer.github.com/changes/2019-11-05-deprecated-passwords-and-authorizations-api/#authenticating-using-query-parameters

      The recommended solution is Please use the Authorization HTTP header instead as using the `access_token` query parameter is deprecated and will be removed July 1st, 2020.

        Attachments

          Issue Links

          is related to

          Improvement - An improvement or enhancement to an existing feature or task. NXP-27446 Improve openId provider descriptor to handle user info request authentication per bearer

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved
          Is referenced in

          [Captain Hook] PR for 10.10: #4095 PR for 10.10: #4095

          [Captain Hook] PR for master: #4294 PR for master: #4294

          [Captain Hook] PR for master: #4597 PR for master: #4597

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 2 hours, 5 minutes
                  2h 5m