update to omniauth 2 #201
Merged
update to omniauth 2 #201
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
thinking this is the easiest way to avoid changing routes or sign-in links
trying with removing the `-gnu`. Why did bundler add this?
This reverts commit 71961b1.
Deploy is giving some new error:
```
looks like you're trying to use Nokogiri as a precompiled native gem on a system
with an unsupported version of glibc.
/lib64/libc.so.6: version `GLIBC_2.28' not found (required by /swadm/web/z/shared/bundle/ruby/3.2.0/gems/nokogiri-1.18.1-x86_64-linux-gnu/lib/nokogiri/3.2/nokogiri.so) - /swadm/web/z/shared/bundle/ruby/3.2.0/gems/nokogiri-1.18.1-x86_64-linux-gnu/lib/nokogiri/3.2/nokogiri.so
If that's the case, then please install Nokogiri via the `ruby` platform gem:
gem install nokogiri --platform=ruby
or:
bundle config set force_ruby_platform true
Please visit https://nokogiri.org/tutorials/installing_nokogiri.html for more help.
```
noticed there's a new `-gnu` on the nokogiri package:
`nokogiri (1.18.1-x86_64-linux-gnu)`. Maybe a bundle update
Maybe this? sparklemotion/nokogiri#3359
cmcfadden
approved these changes
Dec 30, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This mitigates CVE-2015-9284 by:
POSTrequests to/auth/:providerendpointstoyokazu/omniauth-shibboleth(unmaintained). omniauth-shibboleth-redux is a fork maintained as part of omniauth.The key change is now the
/shortener/signinroute renderssessions.new.html.erb, an interstitial page which will autosubmit a form with a CSRF token as aPOSTrequest to/auth/:provider.