Skip to content
This repository has been archived by the owner on Jul 24, 2023. It is now read-only.

Rescue from Yadis::XRI::XRIHTTPError on discovery #106

Merged
merged 1 commit into from
Jun 26, 2019

Conversation

meineerde
Copy link
Contributor

The error is explicitly thrown on any fetch errors by Yadis::XRI::ProxyResolve#query (including for bad URIs, network issues, invalid responses, ...) Since this error is not rescued anywhere today, it bubbles up beyond OpenID::Consumer.begin when called with e.g. an invalid URL like "(this is not a URL)" (including the parenthesis).

I'm not sure how to properly test this with the different mock-fetchers. For someone more accustomed with the tests, this might be easier :)

The error is explicitly thrown on any fetch errors by
Yadis::XRI::ProxyResolve#query (including for bad URIs, network issues,
invalid responses, ...)
@meineerde
Copy link
Contributor Author

A note regarding the test failures, all of which are unrelated to this pull request

@tobiashm
Copy link
Contributor

Hi @meineerde
Sorry for letting this hang for so long.

@tobiashm tobiashm merged commit aebc02e into openid:master Jun 26, 2019
netbsd-srcmastr pushed a commit to NetBSD/pkgsrc that referenced this pull request Nov 18, 2019
Update ruby-ruby-openid package to version 2.9.2.


## 2.9.2

* Perform all checks before verifying endpoints.
  [#126](openid/ruby-openid#126)

## 2.9.1

* Updated CHANGELOG.md

## 2.9.0

* Remove deprecated `autorequire` from gemspec.
  [#123](openid/ruby-openid#123)
* Rescue from `Yadis::XRI::XRIHTTPError` on discovery.
  [#106](openid/ruby-openid#106)
* Avoid SSRF for claimed_id request.
  [#121](openid/ruby-openid#121)
* Updated documentation.
  [#115](openid/ruby-openid#115), [#116](openid/ruby-openid#116), [#117](openid/ruby-openid#117), [#118](openid/ruby-openid#118)
* Reduce warnings output in test runs.
  [#119](openid/ruby-openid#119)
* Drop deprecated option from gemspec.
  [#120](openid/ruby-openid#120)
* Remove circular require.
  [#113](openid/ruby-openid#113)
* Updated Travis CI config with Ruby 2.6
  [#114](openid/ruby-openid#114)
* Simplify Bundler require; remove need for extra `:require`.
  [#112](openid/ruby-openid#112)

## 2.8.0

* Fix `admin/mkassoc` script.
  See openid/ruby-openid#103
* Allow specifying timeout for `OpenID::StandardFetcher` in environment variables.
  See openid/ruby-openid#109
* Fixed some documentation.
  See openid/ruby-openid#111
* Fixed example server.
  See openid/ruby-openid#91
* Fixed tests.
  See openid/ruby-openid#86
* Misc. changes to the CI setup.
  See
  - openid/ruby-openid#110
  - openid/ruby-openid#108
  - openid/ruby-openid#107
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants