The regex here (
|
if (!decoded.sub.match(/^https?:\/\/.+\..+$/)) { |
) doesn't allow for a domain like
https://localhost:8443/profile/card#me. Because NSS does not issue a
webid claim, a user running NSS on single-user mode locally is not able to log in.