Uh oh!
There was an error while loading. Please reload this page.
Do not logout on auth on public share page - #9756
Closed
rullzer wants to merge 1 commit into
Closed
Conversation
7 tasks
If the user is authenticated to cloudA. And then visits a password protected public link where we authenticate. We should rotate the token to the new session id. Else they have to reauthenticate Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
rullzerforce-pushed
the
bugfix/noid/do_not_logout_on_public_share_auth
branch
from
June 5, 2018 19:48
c81f991 to
8da4fe3CompareCodecov Report
@@ Coverage Diff @@## master #9756 +/- ##
=============================================
- Coverage 51.72% 29.96% -21.77% + Complexity 25753 24452 -1301
=============================================
Files 1638 1478 -160 Lines 96052 79956 -16096 Branches 1385 0 -1385 =============================================
- Hits 49682 23955 -25727 - Misses 46370 56001 +9631
|
| $this->session->regenerateId(); | ||
| $newId = $this->session->getId(); | ||
| try { | ||
| $this->tokenProvider->renewSessionToken($oldId, $newId); |
There was a problem hiding this comment.
Do we really want to work with the provider directly here? IMO it should be handled via some kind of manager service. What do you think?
MemberAuthor
There was a problem hiding this comment.
This is just the quick fix. Once #9518 is in this all abstracted away from the users.
MemberAuthor
There was a problem hiding this comment.
But fair enough. Some manager in the public I terface to tackle this makes sense...
MemberAuthor
There was a problem hiding this comment.
Maybe an extra manager is overkill here. Can't we just add a parameter (or new function) to the ISession?
rullzer
commented
Jun 11, 2018
MemberAuthor
#9823 is probably better. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
If the user is authenticated to cloudA. And then visits a password
protected public link where we authenticate. We should rotate the token
to the new session id. Else they have to reauthenticate
Signed-off-by: Roeland Jago Douma roeland@famdouma.nl