Mercurial > p > roundup > code
diff roundup/cgi/client.py @ 6436:1f2f7c0b8968
issue2550837 - New option for web auth (also http header passing)
Implement experimental support to allow tracker to use an alternate
authentication variable replacing ROUNDUP_USER. Also add -I option to
roundup-server to whitelist HTTP headers that should be passed through
to the tracker.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Mon, 14 Jun 2021 19:33:27 -0400 |
| parents | b35a50d02890 |
| children | 8f8f4988b856 |
line wrap: on
line diff
--- a/roundup/cgi/client.py Fri Jun 11 18:09:21 2021 -0400 +++ b/roundup/cgi/client.py Mon Jun 14 19:33:27 2021 -0400 @@ -997,17 +997,18 @@ user = None # first up, try http authorization if enabled cfg = self.instance.config + remote_user_header = cfg.WEB_HTTP_AUTH_HEADER or 'REMOTE_USER' if cfg.WEB_COOKIE_TAKES_PRECEDENCE: user = self.session_api.get('user') if user: # update session lifetime datestamp self.session_api.update() - if 'REMOTE_USER' in self.env: - del self.env['REMOTE_USER'] + if remote_user_header in self.env: + del self.env[remote_user_header] if not user and cfg.WEB_HTTP_AUTH: - if 'REMOTE_USER' in self.env: + if remote_user_header in self.env: # we have external auth (e.g. by Apache) - user = self.env['REMOTE_USER'] + user = self.env[remote_user_header] if cfg.WEB_HTTP_AUTH_CONVERT_REALM_TO_LOWERCASE and '@' in user: u, d = user.split ('@', 1) user = '@'.join ((u, d.lower()))