WordPress 2.3 Messes Up Your OpenID Delegation

No way home
Attribution-NonCommercial-ShareAlike License by akashgoyal

If you use your WordPress blog as an OpenID (as I do) via a link rel=’openid.delegate’ tag (that delegates to an external OpenID service) then you may be locked out of your accounts after upgrading to WordPress 2.3.x.

Wordpress 2.3 introduced a new feature called URL canonicalization that turns requests to foo.com into www.foo.com. The justification is that it helps normalize statistics gathering in some cases (though in my experience, Google Analytics needed no such help).

But what happens if you were using an OpenID like foo.com on a (OpenID ‘consumer’) site like pibb.com is that after the WP 2.3.2 upgrade you actually end up authenticating the id www.foo.com (not foo.com). So you can never get back into your foo.com account at pibb.com. Got that?

Update 4:49pm:

My initial solution was this nifty one-line disable canonical redirects plugin from Mark Jaquith. Simply drop that in your WP plugins and enable it and you’ll no longer suffer URL canonicalization. But a simpler approach was to simply set the blog URL to http://meme-rocket.com in general options. Now I’m redirecting www.meme-rocket.com to meme-rocket.com and all’s well.

Identity
OpenID

Comments (1)

Permalink

Portland On Fire

Raven Zachary, über-connector, has launched a nifty new site: portlandonfire.com that is profiling one Portlander a day. I’d like to know what his secret energy source is.

If you’d like to know my secret foibles, check it out — I’m featured today.

Portland Community
diversion

Comments (2)

Permalink

NYT Multimedia Presentation Viewer

The New York Times’ multimedia presentation viewer is a thing of beauty. The example below is taken from a story on Benazir Bhutto.

NYT Multimedia Presentation Viewer

Flash wins again. Notice how hovering over the thumb yields a time-indexed image popup. Very fluid, very useful.

design
usability

Comments (0)

Permalink