Official Single-Sign-On for Discourse (sso) has an HMAC-256 encoding “Real world example” I cannot duplicate. [图片] Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso) SSO secret: d836444a9e4084d5b224a60c208dce14 Payload is Base64 encoded: bm9uY2U9Y2I2ODI1MWVlZmI1MjExZTU4YzAw…

The problem seems to be in the example, not the code, presumably a cut/paste error. Current Version: Raw payload is generated: nonce=cb68251eefb5211e58c00ff1395f0c0b Payload is Base64 encoded: bm9uY2U9Y2I2ODI1MWVlZmI1MjExZTU4YzAwZmYxMzk1ZjBjMGI=\n Payload is URL encoded: bm9uY2U9Y2I2ODI1MW…

The code was changed to use strict_encode64 (which doesn’t add the newlines) here: single_sign_on: encode the payload with strict_encode64 which doesn't add extraneous newlines committed 05:41PM - 17 Oct 17 UTC (UTC) …

官方 SSO 页面上的 HMAC-256 示例

支持 SSO

sam (Sam Saffron) 2018 年7 月 18 日 04:19 2

Read through:

https://github.com/discourse/discourse/blob/master/lib/single_sign_on.rb#L80-L83

This code is carefully tested.

Hashing Secret + Payload for SSO

话题		回复	浏览量
DiscourseConnect payload hash encoding mismatch SSO	4	1313	2021 年6 月 1 日
Hashing Secret + Payload for SSO SSO	9	2643	2020 年11 月 6 日
Watch out for double url encoding of SSO payload SSO	0	1549	2019 年7 月 28 日
SSO and e-mail addresses having a plus sign Support	4	2080	2021 年4 月 21 日
Login error while trying to use Discourse as an identity provider (SSO, DiscourseConnect) SSO	3	895	2023 年5 月 30 日

官方 SSO 页面上的 HMAC-256 示例

相关话题