Mercurial > p > roundup > code
diff roundup/configuration.py @ 6436:1f2f7c0b8968
issue2550837 - New option for web auth (also http header passing)
Implement experimental support to allow tracker to use an alternate
authentication variable replacing ROUNDUP_USER. Also add -I option to
roundup-server to whitelist HTTP headers that should be passed through
to the tracker.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Mon, 14 Jun 2021 19:33:27 -0400 |
| parents | 08e209a7f22b |
| children | 8f1b91756457 |
line wrap: on
line diff
--- a/roundup/configuration.py Fri Jun 11 18:09:21 2021 -0400 +++ b/roundup/configuration.py Mon Jun 14 19:33:27 2021 -0400 @@ -836,10 +836,16 @@ "trust *all* users uploading content to your tracker."), (BooleanOption, 'http_auth', "yes", "Whether to use HTTP Basic Authentication, if present.\n" - "Roundup will use either the REMOTE_USER or HTTP_AUTHORIZATION\n" + "Roundup will use either the REMOTE_USER (the value set \n" + "by http_auth_header) or HTTP_AUTHORIZATION\n" "variables supplied by your web server (in that order).\n" "Set this option to 'no' if you do not wish to use HTTP Basic\n" "Authentication in your web interface."), + (Option, "http_auth_header", "", + "The HTTP header that holds the user authentication information.\n" + "If empty (default) the REMOTE_USER header is used.\n" + "This is used when the upstream HTTP server authenticates\n" + "the user and passes the username using this HTTP header."), (BooleanOption, 'http_auth_convert_realm_to_lowercase', "no", "If usernames consist of a name and a domain/realm part of\n" "the form user@realm and we're using REMOTE_USER for\n"