]> git.openstreetmap.org Git - rails.git/commit
Avoid CSP issues with OpenID login
authorTom Hughes <tom@compton.nu>
Mon, 25 Feb 2019 11:44:24 +0000 (11:44 +0000)
committerTom Hughes <tom@compton.nu>
Mon, 25 Feb 2019 11:46:12 +0000 (11:46 +0000)
commitd2ff1491b4b6f8fa3b64ab88414d0dbf01cc520e
tree6bfd08f632e25bff0d37a9708deffa158d308321
parente5c52108967d143c8d8f100260a88f69c907c869
Avoid CSP issues with OpenID login

To avoid Chrom getting upset about sending form data to sites
that our policy doesn't allow, even when it isn't, use Javascript
to jump straight to Omniauth as the direct OpenID based login
buttons were already doing.

Fixes #1909
app/assets/javascripts/login.js
app/controllers/users_controller.rb
app/views/users/login.html.erb
test/integration/user_login_test.rb