"get() returned more than one User" when attempting to use the oauth protected parts of the api

Bug #701209 reported by Anthony Lenton
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ratings and Reviews server
Fix Released
Medium
Anthony Lenton
Software Center Agent
Fix Released
Medium
Anthony Lenton

Bug Description

I suspect this is because:

- Django-openid-auth creates a user for you when you sign into (or try to sign into) authenticated pages like /reviews/moderations/.

- The API is creating UserOpenIDs with only the openid_identifier as the claimed_id portion. This is a bad idea, and should be changed to use the full openid url.

These two openids are different and yet finish in the same openid_identifier, so a search for user's with an openid ending in a particular openid_identifier will return two Users.

Tags: kb-task

Related branches

Changed in rnr-server:
status: New → In Progress
importance: Undecided → Medium
assignee: nobody → Anthony Lenton (elachuni)
tags: added: kb-task
Changed in rnr-server:
status: In Progress → Fix Committed
Changed in software-center-agent:
status: New → In Progress
importance: Undecided → Medium
assignee: nobody → Anthony Lenton (elachuni)
Changed in software-center-agent:
status: In Progress → Fix Committed
Revision history for this message
Dave Morley (davmor2) wrote :

QA untestable on sca there is no known case to trigger it, so we will test it on rnr where we have a case and make the assumption that if the code works on rnr it should work similarly on sca too.

Revision history for this message
Dave Morley (davmor2) wrote :

I was able to login to moderation with no issues so I am saying fixed.

Revision history for this message
Dave Morley (davmor2) wrote :

I'm able to log in again on staging.

Changed in rnr-server:
status: Fix Committed → Fix Released
Changed in software-center-agent:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.