Skip to content

Fix Admin LDAP login option #316

@GUI

Description

@GUI

I'm not sure the LDAP login option has ever worked since we added the omniauth-ldap gem back in #131 (we were missing some additional pieces needed beyond just adding the gem).

I recently had a need for the LDAP authentication setup, so I had fixed the issues in master a couple months ago: 362b917

However, after merging in all the Rails 4 upgrade stuff (#312), the LDAP login option became broken again. The issue now is that LDAP login page doesn't have the Rails CSRF token on it, so Rails is rejecting the callback endpoint.

This CSRF issue is pretty similar to the issue we've seen with the developer login strategy: omniauth/omniauth#674 For the developer strategy, we've just disabled CSRF, since it's only used in development, but we probably don't want to do that for the LDAP strategy.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions