Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix regression for checking validity of login (master) #18

Merged
merged 2 commits into from
Oct 15, 2014

Conversation

sihil
Copy link
Contributor

@sihil sihil commented Oct 15, 2014

Make changes from #17 in master branch

Unfortunately a regression was introduced which means that sessions are not automatically re-validated when the session expires (according to the expiry time provided by Google). This fixes that and also provides the login_hint e-mail address to avoid the account chooser on re-auth.

Note that this might break applications with AJAX endpoints as calls within JS will not follow the redirect correctly. The workflow project has a way around this - speak to @steppenwells if interested. Alternatively you can relax the requirement to re-authenticate by setting the enforceValidity parameter in your GoogleAuthConfig to false.

Unfortunately a regression was introduced which means that sessions are not automatically re-validated when the session expires (according to the expiry time provided by Google). This fixes that and also provides the `login_hint` e-mail address to avoid the account chooser on re-auth.

Note that this might break applications with AJAX endpoints as calls within JS will not follow the redirect correctly. The workflow project has a way around this - speak to @steppenwells if interested. Alternatively you can relax the requirement to re-authenticate by setting the `enforceValidity` parameter in your `GoogleAuthConfig` to `false`.
@sihil sihil changed the title Fix regression for checking validity of login Fix regression for checking validity of login (master) Oct 15, 2014
@philwills
Copy link
Contributor

Is it feasible to add a test to stop me breaking this again?

Otherwise 👍

@sihil
Copy link
Contributor Author

sihil commented Oct 15, 2014

I was wondering about that when I was writing it. I'll add an issue to look at adding some tests.

@sihil sihil mentioned this pull request Oct 15, 2014
sihil added a commit that referenced this pull request Oct 15, 2014
Fix regression for checking validity of login (master)
@sihil sihil merged commit c7872a5 into master Oct 15, 2014
@philwills philwills deleted the sh-fix-expiry-validation branch May 19, 2015 13:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants