Skip to content

Fix issues in strip_password calls in openid service surfacing after PR592 - #641

Merged
jonasbardino merged 1 commit into
nextfrom
fix/strip_password-use-on-grid_openid-exception-message-objects
Aug 18, 2026
Merged

Fix issues in strip_password calls in openid service surfacing after PR592#641
jonasbardino merged 1 commit into
nextfrom
fix/strip_password-use-on-grid_openid-exception-message-objects

Conversation

@jonasbardino

@jonasbardino jonasbardino commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

Follow-up to #592 which results in strip_password helper sometimes hitting openid message objects that it doesn't know what to do about:
2026-08-18 16:30:16,711 ERROR not filtering unexpected obj in strip_password: <openid.message.Message ...

Force those message objects to string to make it succeed.

@jonasbardino jonasbardino self-assigned this Aug 18, 2026
@jonasbardino jonasbardino added bug Something isn't working stale check errors Linting/CI errors are stale old issues not caused by this PR and will be fixed elsewhere. labels Aug 18, 2026
@jonasbardino

Copy link
Copy Markdown
Contributor Author

For the record one can trigger the errors in openid.log with something like

FQDN=someprefix-ext.erda.dk ; IP=$(getent hosts $FQDN|cut -f 1 -d ' ')
curl -L "https://${FQDN}/openid/openidserver?openid.assoc_handle=%7BHMAC-SHA256%7D%7B6a7a0d00%7D%7B5jHeBg%3D%3D%7D&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.realm=https%3A%2F%2F${FQDN}%2F&openid.return_to=https%3A%2F%2F${IP}%2Fwsgi-bin%2Ftwofactor.py%3Fredirect_url%3D%252Fwsgi-bin%252Fautolaunch.py%26modauthopenid.nonce%3DhzMDkox9YH%26redirect_url%3D%252Fwsgi-bin%252Fautolaunch.py&openid.trust_root=https%3A%2F%2F${FQDN}%2F"

on instances deployed with #592 merged.

@jonasbardino jonasbardino added the battle-tested Code was tested to be fully functional in line with project code guidelines. label Aug 18, 2026
…hitting

openid message objects that it doesn't know what to do about. Force to string
to make it succeed.
@jonasbardino
jonasbardino force-pushed the fix/strip_password-use-on-grid_openid-exception-message-objects branch from 9f38bed to 74b3386 Compare August 18, 2026 14:45
@jonasbardino
jonasbardino marked this pull request as ready for review August 18, 2026 14:47
@jonasbardino
jonasbardino requested a review from a team August 18, 2026 14:47

@rasmunk rasmunk left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@jonasbardino
jonasbardino merged commit c5101d1 into next Aug 18, 2026
13 of 17 checks passed
@jonasbardino
jonasbardino deleted the fix/strip_password-use-on-grid_openid-exception-message-objects branch August 18, 2026 15:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

battle-tested Code was tested to be fully functional in line with project code guidelines. bug Something isn't working stale check errors Linting/CI errors are stale old issues not caused by this PR and will be fixed elsewhere.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants