Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Web: If you use Verified Add (IndieAuth) on an already verified site, and then try to use IndieAuth to login to Manage Site, the login will redirect to Verified Add (IndieAuth) #42

Open
m-i-l opened this issue Jun 15, 2021 · 0 comments
Labels
bug Something isn't working

Comments

@m-i-l
Copy link
Contributor

m-i-l commented Jun 15, 2021

To recreate:

  1. With a new browser session, click Add Site / Verified Add (IndieAuth) and enter a site already validated site with IndieAuth. It'll go through the auth process but then say "This domain has already been registered. Click Manage My Site to manage it"
  2. Go to Manage Site. You'll be taken to the login page. View source and you'll see hidden redirect_uri set to https://searchmysite.net/admin/add/indieauth1home/ . It should be https://searchmysite.net/admin/login/ .
  3. Login with IndieAuth. You'll be redirected to the Verified Add (IndieAuth) page, with "This domain has already been registered." message, rather than the "Manage Site" page.

Need to catch that sequence and make sure the redirect_uri is set correctly.

Short term workaround for affected users is to start a new browser session (or enter https://searchmysite.net/admin/logout/ within the same browser session to clear the session), and go straight to Manage Site.

@m-i-l m-i-l added the bug Something isn't working label Jun 15, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant