wordpress-indieauth

wordpress-indieauth copied to clipboard

Want to document how to test tokens using curl/wget.

dshanske

Incoming tokens need to be better sanitized to avoid vulnerabilities.

dshanske

"Authorization has Failed" message shows up, but login works fine

4

On my test-server I see the "Authorization has Failed" error message, but the authentication works fine, so either the message shouldn't be displayed or the login should have failed. It...

pfefferle

Add SSL warning

2

Warn and/or disable the token verification for security reasons if site is not SSL

dshanske

https://github.com/woocommerce/woocommerce/blob/master/includes/class-wc-rest-authentication.php Some of their implementation is worth adopting.

dshanske

Check for Presence of mb_convert_encoding

1

Fatal error: Uncaught Error: Call to undefined function mb_convert_encoding() in /var/www/html/s.ragavan.co/public_html/wp-content/plugins/indieauth/includes/class-indieauth-client-discovery.php:113 Stack trace: #0 /var/www/html/s.ragavan.co/public_html/wp-content/plugins/indieauth/includes/class-indieauth-client-discovery.php(51): IndieAuth_Client_Discovery::extract_client_data_from_html('...', 'https://indieau...') #1 /var/www/html/s.ragavan.co/public_html/wp-content/plugins/indieauth/includes/class-indieauth-client-discovery.php(12): IndieAuth_Client_Discovery->parse('https://indieau...') #2 /var/www/html/s.ragavan.co/public_html/wp-content/plugins/indieauth/includes/class-indieauth-authorization-endpoint.php(210): IndieAuth_Client_Discovery->__construct('https://indieau...') #3 /var/www/html/s.ragavan.co/public_html/wp-content/plugins/indieauth/includes/class-indieauth-authorization-endpoint.php(199): IndieAuth_Authorization_Endpoint->authorize() #4 /var/www/html/s.ragavan.co/public_html/wp-includes/cla in /var/www/html/s.ragavan.co/public_html/wp-content/plugins/indieauth/includes/class-indieauth-client-discovery.php...

dshanske

Getting error Missing Parameter: redirect_uri even when a redirect URI is present

10

Getting this error: {"error":"parameter_absent","error_description":"Missing Parameter: redirect_uri"} This error occurs when using Micropub (tried with ownyourgram and Teacup) and when trying to log in to the Indieweb wiki. But there is...

kimberlyhirsh

User wants to authenticate to example.com. But their WordPress installation is at example.com/blog. Possible solution...allow me URL properties that are on the same domain, but are URLs of the WordPress...

dshanske

As part of taking more scope control into the IndieAuth plugin, it shouldn't issue scopes the user cannot support

dshanske

codeclimate seems not configured properly, because it still throws a lot of errors/warnings.

pfefferle