Django-allauth - OpenID 和 OAuth 重定向 + Apache 作为代理答案

【问题标题】：Django-allauth - OpenID and OAuth redirect + Apache as ProxyDjango-allauth - OpenID 和 OAuth 重定向 + Apache 作为代理
【发布时间】：2016-02-29 09:14:00
【问题描述】：

我正在尝试通过基于 OpenID 的 Steam 登录。

我的环境非常简单，django 使用 gunicorn @ 8000，Apache @ 80 运行

<VirtualHost *:80>
    ServerName dev.example.com

    # Point this to your public folder of teambox
    DocumentRoot /var/www/vhosts/dev.example.com/Example/

    # Custom log file locations
    ErrorLog  /var/log/apache2/dev.example.com_error.log
    CustomLog /var/log/apache2/dev.example.com_access.log combined

    ProxyRequests     Off
    ProxyPreserveHost On
    ProxyPass / http://127.0.0.1:8000/
    <Location />
        ProxyPassReverse /
        Order deny,allow
        Allow from all
    </Location>
</VirtualHost>

在这两种情况下，我都会收到以下错误

ERROR:root:Missing required parameter in response from https://steamcommunity.com/openid/login: ('http://specs.openid.net/auth/2.0', 'assoc_type')
Traceback (most recent call last):
  File "/usr/local/lib/python3.4/dist-packages/openid/message.py", line 455, in getArg
    return self.args[args_key]
KeyError: ('http://specs.openid.net/auth/2.0', 'assoc_type')

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/local/lib/python3.4/dist-packages/openid/consumer/consumer.py", line 1280, in _requestAssociation
    assoc = self._extractAssociation(response, assoc_session)
  File "/usr/local/lib/python3.4/dist-packages/openid/consumer/consumer.py", line 1397, in _extractAssociation
    OPENID_NS, 'assoc_type', no_default)
  File "/usr/local/lib/python3.4/dist-packages/openid/message.py", line 458, in getArg
    raise KeyError((namespace, key))
KeyError: ('http://specs.openid.net/auth/2.0', 'assoc_type')

现在奇怪的（对我来说）部分是，如果我直接连接到 8000，即使它在后台产生错误，重定向也会起作用，但通过 80 却不会。最奇怪的是，Django 返回的重定向不一样。

:80 通过 Apache

example.com/nl/openid/login/?process=login&openid=http%3A%2F%2Fsteamcommunity.com%2Fopenid

example.com/nl/openid/login?openid.ax.mode=fetch_request&openid.ax.required=...

example.com/nl/openid/login/?openid.ax.mode=fetch_request&openid.ax.required=...

:8000 案例 - 直接连接到 gunicorn

example.com:8000/nl/openid/login/?process=login&openid=http%3A%2F%2Fsteamcommunity.com%2Fopenid

https://steamcommunity.com/openid/login?openid.ax.mode=fetch_request&openid.ax.required=...

-- 编辑--

经过更多测试，事实证明 Google OAuth 也有同样的问题，将我重定向到我的网站 /o/oauth2/ 而不是 google.com/o/oauth2/

【问题讨论】：

标签： python django apache gunicorn django-allauth

【解决方案1】：

经过一番踢腿、尖叫和向 Apache 众神祈祷后，结果发现我的 Apache 配置错误，ProxyPassReverse 有问题

ProxyRequests     Off
ProxyPreserveHost On
ProxyPass / http://127.0.0.1:8000/
ProxyPassReverse / http://127.0.0.1:8000/
<Location />
    # ProxyPassReverse /
    Order deny,allow
    Allow from all
</Location>

【讨论】：