{"id":1168,"date":"2010-12-28T19:24:11","date_gmt":"2010-12-28T18:24:11","guid":{"rendered":"http:\/\/t-machine.org\/?p=1168"},"modified":"2010-12-28T19:24:11","modified_gmt":"2010-12-28T18:24:11","slug":"dont-use-bitbucket-broken-openid-authentication","status":"publish","type":"post","link":"http:\/\/new.t-machine.org\/index.php\/2010\/12\/28\/dont-use-bitbucket-broken-openid-authentication\/","title":{"rendered":"Don’t use BitBucket – broken OpenID authentication"},"content":{"rendered":"

We’re starting a new client project, and the client uses Mercurial exclusively, all through BitBucket.<\/p>\n

\"\"<\/a><\/p>\n

BitBucket has a stupid user-accounts system, that demands you invent a globally-unique username. Oh dear lord – how amateurish are you guys?<\/p>\n

Aha! BUT! … they have a (very subtle) link to let you use OpenID instead. Phew! My day is saved – I don’t have to be “dodgy-69-sucker-11111” just in a desperate attempt to work around a naive website architect.<\/p>\n

OpenID FAIL<\/h4>\n

Except … once you’ve sacrificed your private account details to Atlassian, they … don’t allow you to login. It reports “success” but tells you that you’re not allowed to use OpenID to access the site, you STILL have to create a non-OpenID account, using a globally unique ID.<\/p>\n

I’m sure they’re doing “something” with OpenID, but I get the impression that the folks at BitBucket don’t grok what most of the world is using it for…<\/p>\n

How do I take back my Identity, you fraudsters?<\/h4>\n

Well, Atlassian won’t help you there.<\/p>\n

Fortunately, Google did…<\/p>\n

Google’s UI designers FTW<\/h4>\n

I used Google as my OpenID source this time around. And, *fortunately*, Google’s process for de-authorizing a website is very simple.<\/p>\n

I usually assume Google’s UI is great, and I usually only blog about it when it fails badly, but here’s an example where it works beautifully.<\/p>\n

(hint: there’s a shortcut – but Google might change the link in future. You can go directly to: https:\/\/www.google.com\/accounts\/IssuedAuthSubTokens<\/a>)<\/p>\n

Just go to your account page (https:\/\/www.google.com\/accounts\/<\/a>), and *right at the top of the page* (thanks, Google!) is a link to all your authorized websites – it’s in a big white space on it’s own, VERY easy to find.<\/p>\n","protected":false},"excerpt":{"rendered":"

We’re starting a new client project, and the client uses Mercurial exclusively, all through BitBucket. BitBucket has a stupid user-accounts system, that demands you invent a globally-unique username. Oh dear lord – how amateurish are you guys? Aha! BUT! … they have a (very subtle) link to let you use OpenID instead. Phew! My day […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[45,46,32],"tags":[],"_links":{"self":[{"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/posts\/1168"}],"collection":[{"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/comments?post=1168"}],"version-history":[{"count":0,"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/posts\/1168\/revisions"}],"wp:attachment":[{"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/media?parent=1168"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/categories?post=1168"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/tags?post=1168"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}