重定向回时禁止LightOpenID [英] LightOpenID forbidden when redirecting back

问题描述

我正在尝试使用lightOpenID，它应该很简单，并且可以上传文件然后对其进行测试. 当我使用example-google.php时，我单击登录按钮，这是它第一次要求我登录Google并允许/记住我正在构建的网站.然后，它将重定向回example-google.php?login和大量的属性.但是该页面上显示禁止访问.您无权访问此服务器上的path/to/folder/example-google.php." 如果我删除网址中包括登录"的属性，那么我将获得使用Google登录按钮"，因此很明显我确实具有正确的文件权限.

I'm trying to use lightOpenID, which should be simple and a case of uploading the files then testing it works. When I use the example-google.php I get click the login button, the first time it asked me to login to Google and allow/remember the site I'm building. Then it redirects back to example-google.php?login and a load of attributes. But that page says "Forbidden. You don't have permission to access path/to/folder/example-google.php on this server." if I delete the attributes including ?login in the url, then I get the "Login with Google button" so clearly I do have file permissions correct.

如果我从现在开始单击该按钮，它将立即将我重定向到禁止访问的页面，因此很明显Google记得我已经登录并且对使用该登录名的网站感到满意.

If I click that button from now on it redirects me to the forbidden page right away, so clearly Google is remembering I'm logged in and happy with my site using the login.

我为此感到震惊，尝试寻求帮助和各种帮助.感谢您的帮助，但是我已经快要放弃openid了(因为其他libs似乎更难以实现).

I've rattled my brain over this, tried searching for help and all sorts. Any help is appreciated but I'm near the point of abandoning openid (because the other libs seemed more trouble to implement).

推荐答案

在对此问题进行了大量搜索之后，我发现它可以正常工作.该问题可能是您的apache服务器或托管提供商的apache服务器已将mod_security配置为阻止查询字符串中的URL.我的托管服务提供商是Hostgator，我所要做的就是让他们将我的域列入白名单，但它却不再向我提供403.

After a lot of searching on this very issue, I got it to work. The issue is likely that your apache server or hosting provider's apache server has mod_security configured to block URLs in querystrings. My hosting provider is Hostgator, and all I did was ask them to whitelist my domains, and it stopped giving me the 403.

这篇关于重定向回时禁止LightOpenID的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！