<div dir="ltr">Hi All,<div><br></div><div style>I've been trying to get an OP implemented in Rails that supports verification of the RP return_to value. </div><div style><br></div><div style>From what I can tell, on the CheckIDRequest class, there is a return_to_verified method that uses TrustRoot to verifiy the RP's return_to value is valid. Inside the method that is defined by TrustRoot it refers to a <font face="courier new, monospace">services</font> variable that doesn't seem to be defined anywhere. </div>
<div style><br></div><div style>Is there something I'm missing here?</div><div style><br></div><div style>Here is the code snippet from TrustRoot that is failing:</div><div style><br></div><div style><div><font face="courier new, monospace"> # Given a relying party discovery URL return a list of return_to</font></div>
<div><font face="courier new, monospace"> # URLs.</font></div><div><font face="courier new, monospace"> def TrustRoot.get_allowed_return_urls(relying_party_url)</font></div><div><font face="courier new, monospace"> rp_url_after_redirects, return_to_urls = <span style="background-color:rgb(255,255,0)">services</span>.get_service_endpoints(</font></div>
<div><font face="courier new, monospace"> relying_party_url, _extract_return_url)</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> if rp_url_after_redirects != relying_party_url</font></div>
<div><font face="courier new, monospace"> # Verification caused a redirect</font></div><div><font face="courier new, monospace"> raise RealmVerificationRedirected.new(</font></div><div><font face="courier new, monospace"> relying_party_url, rp_url_after_redirects)</font></div>
<div><font face="courier new, monospace"> end</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> return return_to_urls</font></div><div><font face="courier new, monospace"> end</font></div>
<div><font face="courier new, monospace"><br></font></div><div style><font face="arial, helvetica, sans-serif">The highlighted value is what causes the failure for me. Any help related to this matter would be great.</font></div>
<div style><font face="arial, helvetica, sans-serif"><br></font></div><div style><font face="arial, helvetica, sans-serif">Thanks</font></div><div style><font face="arial, helvetica, sans-serif"><br></font></div><div style>
<font face="arial, helvetica, sans-serif">Terry Daniels</font></div></div></div>