[JIRA] Created: (JENKINS-9792) OpenID Javascript does not load - 403

OpenID Javascript does not load - 403
-------------------------------------

                 Key: JENKINS-9792
                 URL: https://issues.jenkins-ci.org/browse/JENKINS-9792
             Project: Jenkins
          Issue Type: Bug
          Components: openid
    Affects Versions: current
            Reporter: Aaron Hamid
            Assignee: Kohsuke Kawaguchi
         Attachments: jenkens-openid-js-403.png

I just installed the OpenID plugin, 1.3 on Jenkins 1.413.  After configuring "on the side" open id endpoints for my account, when I go to log in with OpenID, I do not see the provider selection interface, and if I manually enter my endpoint or username, I get the error "org.openid4java.discovery.DiscoveryException: 0x500: Cannot parse identifier: null".

Looking in Chrome developer tools and Firefox Firebug, I see that the openid javascript is actually not loading, it is returning a 403. I assume this is the cause of the failure.  Jenkins is behind nginx, but I'm pretty sure the problem is not with nginx.  I have no security applied in nginx, and the Winstone header is returned in the 403 response "X-Powered-By: Servlet/2.5 (Winstone/0.9.10)".

--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

     [ https://issues.jenkins-ci.org/browse/JENKINS-9792?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Aaron Hamid updated JENKINS-9792:
---------------------------------

    Attachment: jenkens-openid-js-403.png

> OpenID Javascript does not load - 403
> -------------------------------------
>
>                 Key: JENKINS-9792
>                 URL: https://issues.jenkins-ci.org/browse/JENKINS-9792
>             Project: Jenkins
>          Issue Type: Bug
>          Components: openid
>    Affects Versions: current
>            Reporter: Aaron Hamid
>            Assignee: Kohsuke Kawaguchi
>         Attachments: jenkens-openid-js-403.png, jenkens-openid-js-403.png
>
>
> I just installed the OpenID plugin, 1.3 on Jenkins 1.413.  After configuring "on the side" open id endpoints for my account, when I go to log in with OpenID, I do not see the provider selection interface, and if I manually enter my endpoint or username, I get the error "org.openid4java.discovery.DiscoveryException: 0x500: Cannot parse identifier: null".
> Looking in Chrome developer tools and Firefox Firebug, I see that the openid javascript is actually not loading, it is returning a 403. I assume this is the cause of the failure.  Jenkins is behind nginx, but I'm pretty sure the problem is not with nginx.  I have no security applied in nginx, and the Winstone header is returned in the 403 response "X-Powered-By: Servlet/2.5 (Winstone/0.9.10)".

--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

    [ https://issues.jenkins-ci.org/browse/JENKINS-9792?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=153278#comment-153278 ]

colin schaub commented on JENKINS-9792:
---------------------------------------

I am experiencing the same issue; browser attempts to fetch the 2 openid javascript files and receives a 403 error for both

> OpenID Javascript does not load - 403
> -------------------------------------
>
>                 Key: JENKINS-9792
>                 URL: https://issues.jenkins-ci.org/browse/JENKINS-9792
>             Project: Jenkins
>          Issue Type: Bug
>          Components: openid
>    Affects Versions: current
>            Reporter: Aaron Hamid
>            Assignee: Kohsuke Kawaguchi
>         Attachments: jenkens-openid-js-403.png, jenkens-openid-js-403.png
>
>
> I just installed the OpenID plugin, 1.3 on Jenkins 1.413.  After configuring "on the side" open id endpoints for my account, when I go to log in with OpenID, I do not see the provider selection interface, and if I manually enter my endpoint or username, I get the error "org.openid4java.discovery.DiscoveryException: 0x500: Cannot parse identifier: null".
> Looking in Chrome developer tools and Firefox Firebug, I see that the openid javascript is actually not loading, it is returning a 403. I assume this is the cause of the failure.  Jenkins is behind nginx, but I'm pretty sure the problem is not with nginx.  I have no security applied in nginx, and the Winstone header is returned in the 403 response "X-Powered-By: Servlet/2.5 (Winstone/0.9.10)".

--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

    [ https://issues.jenkins-ci.org/browse/JENKINS-9792?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=153718#comment-153718 ]

Marius Marais commented on JENKINS-9792:
----------------------------------------

This error occurs when the Anonymous Read access setting is revoked.  With Anon Read on, everything works correctly, turning it off causes the error.

(Accessing Jenkins directly, not via nginx, etc.)

> OpenID Javascript does not load - 403
> -------------------------------------
>
>                 Key: JENKINS-9792
>                 URL: https://issues.jenkins-ci.org/browse/JENKINS-9792
>             Project: Jenkins
>          Issue Type: Bug
>          Components: openid
>    Affects Versions: current
>            Reporter: Aaron Hamid
>            Assignee: Kohsuke Kawaguchi
>         Attachments: jenkens-openid-js-403.png, jenkens-openid-js-403.png
>
>
> I just installed the OpenID plugin, 1.3 on Jenkins 1.413.  After configuring "on the side" open id endpoints for my account, when I go to log in with OpenID, I do not see the provider selection interface, and if I manually enter my endpoint or username, I get the error "org.openid4java.discovery.DiscoveryException: 0x500: Cannot parse identifier: null".
> Looking in Chrome developer tools and Firefox Firebug, I see that the openid javascript is actually not loading, it is returning a 403. I assume this is the cause of the failure.  Jenkins is behind nginx, but I'm pretty sure the problem is not with nginx.  I have no security applied in nginx, and the Winstone header is returned in the 403 response "X-Powered-By: Servlet/2.5 (Winstone/0.9.10)".

--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

Daniel Petersson commented on JENKINS-9792

OpenID Javascript does not load - 403

Hi everyone. I need this bug/feature so much that I'm willing to pay $50.00 for it. This offer is registered at FreedomSponsors (http://www.freedomsponsors.org/core/issue/36/openid-javascript-does-not-load-403). Once you solve it (according to the acceptance criteria described there), just create a FreedomSponsors account and mark it as resolved (oh, you'll need a Paypal account too) I'll then check it out and will gladly pay up! If anyone else would like to throw in a few bucks to elevate the priority on this issue, you should check out FreedomSponsors!

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

Bo Shi commented on JENKINS-9792

OpenID Javascript does not load - 403

In Jenkins 1.502 and plugin version 1.6, the security setting "Logged-in users can do anything" with "OpenID SSO" works properly IFF "Prevent Cross Site Request Forgery exploits" is DISABLED. Enabling CSRF security breaks and exhibits the behavior OP describes.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
For more options, visit https://groups.google.com/groups/opt_out.