FEATURE: Use full page redirection for all external auth methods (#8092)

Using popups is becoming increasingly rare. Full page redirects are already used on mobile, and for some providers. This commit removes all logic related to popup authentication, leaving only the full page redirect method.

For more info, see https://meta.discourse.org/t/do-we-need-popups-for-login/127988
This commit is contained in:
David Taylor
2019-10-08 12:10:43 +01:00
committed by GitHub
parent 20514f2e44
commit d2bceff133
21 changed files with 92 additions and 271 deletions

View File

@ -11,11 +11,6 @@ RSpec.describe ApplicationController do
SiteSetting.login_required = true
end
it "should carry-forward authComplete param to login page redirect" do
get "/?authComplete=true"
expect(response).to redirect_to('/login?authComplete=true')
end
it "should never cache a login redirect" do
get "/"
expect(response.headers["Cache-Control"]).to eq("no-cache, no-store")