elsif current_user.auth_provider.present?
# Verify external authenticator before moving on
session[:new_user] = current_user
- redirect_to auth_url(current_user.auth_provider, current_user.auth_uid)
+ redirect_to auth_url(current_user.auth_provider, current_user.auth_uid), :status => :temporary_redirect
else
# Save the user record
session[:new_user] = current_user
end
def login
+ append_content_security_policy_directives(
+ :form_action => %w[accounts.google.com *.facebook.com login.live.com github.com meta.wikimedia.org]
+ )
+
session[:referer] = safe_referer(params[:referer]) if params[:referer]
if params[:username].present? && params[:password].present?