In Preferences -> Setup if I add "http://jamiek.it" as an admin that user cannot edit pages. Adding a trailing slash solves the problem. This is non-obvious and would be good to fix.

I don't think there is any requirement that "$foo" and "$foo/" are the openid of the same entity. Of course, it would be foolish for a system to give out such similar addresses to two different people, but it would be perhaps more foolish for Ikiwiki to try to normalize openids in such a way, opening an attack vector. So, ikiwiki compares openids exactly. (It also doesn't let the capitalization vary!)

The best way to deal with this is to copy and paste the openid out of your Preferences page or elsewhere.

Comment by joey Fri Jun 24 18:51:03 2011

I think what's happening is that when you log in a trailing slash automatically gets added if it's missing. You can see this on the preference page. So the Admin ID always needs a trailing slash too.

Incidentally, before tonight I didn't need to have an "http://" preceding jamiek.it, now I do. However jamiekitson.myopenid.com still works without it.

Something else I noticed, if you try to login when you're already logged in you get the error:

Error: login failed, perhaps you need to turn on cookies?

Cheers

Comment by Jamie Kitson Sat Jun 25 01:09:13 2011