https://bugs.kde.org/show_bug.cgi?id=528259
Bug ID: 528259
Summary: OpenConnect SAML login: embedded web view is fixed at
640x480, identity provider pages are clipped and
cannot be reached
Classification: Plasma
Product: plasmashell
Version First 6.8.2
Reported In:
Platform: Fedora RPMs
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: Networking in general
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: 1.0
Created attachment 197994
--> https://bugs.kde.org/attachment.cgi?id=197994&action=edit
Proposed patch.
When an AnyConnect gateway uses SAML/SSO, plasma-nm shows the identity
provider's login page in an embedded QWebEngineView. In
`vpn/openconnect/openconnectauth.cpp`, `openWebEngine()` sizes that view with:
webEngineView->setFixedSize(640, 480);
and the dialog layout uses `QLayout::SetFixedSize`, so the user cannot resize
the dialog either.
With the Idira identity provider, the sign-in page (QR code for the Idira
Identity app, plus a username field and a "Next" button) is larger than
640x480. The QR code and the controls below it are clipped and cannot be
reached by scrolling or resizing, so the login cannot be completed from the
plasma-nm dialog. The same login works in a regular browser window.
**Steps to reproduce:**
1. Configure an OpenConnect (AnyConnect) VPN whose gateway authenticates via
SAML with a provider whose login page is larger than 640x480 (e.g. Idira).
2. Connect from the network applet.
**Observed:** the login page is clipped at 640x480; the QR code / form
controls are not visible; the dialog cannot be resized.
**Expected:** the web view is large enough to show the provider's login page,
or the dialog can be resized.
**Notes:**
- The 640x480 value was copied from GNOME/NetworkManager-openconnect's
webkitgtk view (per the code comment), introduced with SAML support in
MR 208 (bug 448153).
- Related older sizing reports: bug 403480, bug 380399 (closed as duplicate).
- Workaround verified locally: forcing the view to a larger fixed size makes
the login work end to end.
- A patch is proposed (see attachment).
--
You are receiving this mail because:
You are watching all bug changes.
