g5 / devise_g5_authenticatable Goto Github PK

The devise-omniauth integration dynamically constructs the OAuth 2.0 redirect URI based on the current request URL. This causes problems when the scheme in the request URL and the registered redirect URI do not match (e.g. the redirect URI uses HTTPS but the client application was accessed using plain HTTP).

The quick fix is for the client application to force HTTPS for all requests, which is generally a good idea for most of our apps anyway. This should be added to the instructions in the README.

To cover all possibilities, it would also be nice if we respected the G5_AUTH_REDIRECT_URI environment variable if it has been set.

The latest devise release causes numerous test failures with the error messages like "translation missing: en.devise.omniauth_callbacks.user.signed_in" or "translation missing: en.devise.omniauth_callbacks.user.not_found". The last known devise version that worked correctly was v3.4.1.