mozilla-services/repoze.who.plugins.browserid — Issue #2: audience is set wrong for proxied applications
Author: catlee
Created: 2011-11-18 19:01:25+00:00
State: open

The audience for the browserid assertion is currently set to HTTP_HOST. For applications which are proxied behind apache or some other front end, this doesn't work. The browser thinks it's talking to 'http://host.domain.com', and the app thinks it's 'http://localhost:5000'