search

formapro / FpOpenIdBundle

Symfony2 OpenID security extension
53 stars 31 forks source link

check path configuration issue for fp_openid #43

Closed atsiddiqui closed 12 years ago

atsiddiqui commented 12 years ago

Every time on /login_check?openid.asso... I am getting You must configure the check path to be handled by the firewall using fp_openid in your security firewall configuration.

makasim commented 12 years ago

can you dump here your configuration of security?

makasim commented 12 years ago

also could you check whether this method returns true: https://github.com/formapro/FpOpenIdBundle/blob/master/Security/Http/Firewall/AbstractOpenIdAuthenticationListener.php#L62 If not check light openid relying party supports method.

atsiddiqui commented 12 years ago

security: factories:

providers:
    in_memory:
        users:
            user:  { password: userpass, roles: [ 'ROLE_USER' ] }
firewalls:
    main:
        pattern: ^/
        logout:       true
        anonymous:    true

        fp_openid:
            login_path:                   /login_openid
            create_user_if_not_exists:    false
            relying_party:                fp_openid.relying_party.default
            check_path:                   /login_check
            always_use_default_target_path: false
            default_target_path:          /
            target_path_parameter:        _target_path
            provider:                     ~

access_control:
    - { path: ^/login_openid$, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/secured_area, role: IS_AUTHENTICATED_OPENID }
makasim commented 12 years ago

the configuration looks ok. so please debug that requiresAuthentication method. You can get the exception only in case of this method returns false.

atsiddiqui commented 12 years ago

requiresAuthentication returns bool(false)

atsiddiqui commented 12 years ago

what could be the possible solution for that?

makasim commented 12 years ago

It is hard to help cuz I can reproduce such problem on sf2.1 sandbox, \

In any case please answer some questions, I hope they bring some light on the problem:

which openid provider are you using? Is the error comes with different providers or just only with one? Could you post the url you come back with?

makasim commented 12 years ago

I will look at it later.