mahara-contributors team mailing list archive

[Hugh Davenport <1015912@xxxxxxxxxxxxxxxxxx>]

Righto, I get you now. Here is what I would suggest for this bug.

- When first allowing the admin to enable a plugin, check whether access is permitted. This could also be done for other SSO type plugins (though most after configuration).
- When an error occurs for the user, send the admin a notification.

This won't be just limited to browserid, but just general auth relying
on 3rd parties.

Cheers,

Hugh

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/1015912

Title:
  BrowserID plugin should check for firewall issues before getting
  enabled

Status in Mahara ePortfolio:
  Opinion

Bug description:
  If your server is set to prevent outgoing HTTPS connections, the
  BrowserID plugin will fail to verify any assertion with this error
  message:

    Mahara did not receive valid JSON output from the BrowserID
  verifier.

  Ideally, the auth plugin should curl https://browserid.org/verify and
  see if it can reach it succesfully before letting admins enable it for
  a site.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1015912/+subscriptions