9a275b2f18
doc: Document security issues involving LWP::UserAgent
...
Recommend the LWPx::ParanoidAgent module where appropriate.
It is particularly important for openid, since unauthenticated users
can control which URLs that plugin will contact. Conversely, it is
non-critical for blogspam, since the URL to be contacted is under
the wiki administrator's control.
Signed-off-by: Simon McVittie <smcv@debian.org>
2019-02-26 22:21:31 +00:00
720c83eff8
refer to openid delegation
2016-06-03 18:54:46 -04:00
fbf2036c92
2014-09-14 18:04:06 -04:00
72064d51fc
correct typo
2011-06-24 23:42:02 +00:00
d5181a1977
realm is an url pattern
2010-06-11 14:14:20 -04:00
475b4199e1
openid: Add openid_realm and openid_cgiurl configuration options, useful in a few edge case setups.
2010-06-11 13:53:56 -04:00
8f6cfbfade
Removed the openidsignup option.
2010-05-07 21:33:27 -04:00
7f64ff2ae0
url to myopenid affiliate program has changed
2010-05-06 17:32:19 -04:00
5193f9ee6b
update openid docs regarding openid 2, since smcv noticed
...
a newer perl module supports it. Although, based on its bug
reports at
<http://rt.cpan.org/Public/Dist/Display.html?Name=Net-OpenID-Consumer >,
there may be some problems (myspace is known not to work,
for example).
2009-06-03 15:42:04 -04:00
297ff849b9
Migrate doc/plugins via prefix_directives
...
This is a partial commit of:
egrep -rl '\[\[[a-z]+ ' doc | xargs --max-args 1 ./ikiwiki-transition
prefix_directives
2008-07-21 12:31:57 +01:00
1e62e4f87f
* Enable openid logins by default.
...
* Enable usedirs by default.
2007-04-29 22:54:14 +00:00
19c58ac7c1
simplified plugin definitions
2007-02-13 18:51:21 +00:00
330d8a32ce
doesn't really matter what do= is set to, as long as it's set
2006-11-20 12:46:48 +00:00
22064a9f81
testing
2006-11-20 12:26:25 +00:00
e0832eefea
testing
2006-11-20 12:26:02 +00:00
dba20f21c6
testing
2006-11-20 12:25:39 +00:00
eac31eff5c
shortcut stuff
2006-11-20 11:31:23 +00:00
7b2206c171
cleanup
2006-11-20 09:52:09 +00:00
e43cd269d2
* Add openidsignup config option.
...
* Make the openid plugin support the callbacks from myopenid.com via its
affiliate program.
* Change how post signin actions are propigated through the signin process;
they're now stored in the session.
2006-11-20 09:40:09 +00:00
54cf5a62ca
* Make auth methods pluggable.
...
* Move httpauth support to a plugin.
* Add an openid plugin to support logging in using OpenID.
2006-11-20 01:52:18 +00:00
Simon McVittie
https://id.koumbit.net/anarcat
jcflack
https://launchpad.net/~kralph
Joey Hess
Joey Hess
Simon McVittie
joey