Commit cbc11fd8 authored by David Lawrence's avatar David Lawrence

Bug 1001462: Bug.search causes error when using simple token auth and specifying…

Bug 1001462: Bug.search causes error when using simple token auth and specifying 'token' instead of 'Bugzilla_token' r=glob,a=glob
parent 16fa3bf6
...@@ -53,27 +53,20 @@ use constant MAPPED_RETURNS => { ...@@ -53,27 +53,20 @@ use constant MAPPED_RETURNS => {
sub login { sub login {
my ($self, $params) = @_; my ($self, $params) = @_;
# Check to see if we are already logged in
my $user = Bugzilla->user;
if ($user->id) {
return $self->_login_to_hash($user);
}
# Username and password params are required # Username and password params are required
foreach my $param ("login", "password") { foreach my $param ("login", "password") {
defined $params->{$param} (defined $params->{$param} || defined $params->{'Bugzilla_' . $param})
|| ThrowCodeError('param_required', { param => $param }); || ThrowCodeError('param_required', { param => $param });
} }
# Make sure the CGI user info class works if necessary. $user = Bugzilla->login();
my $input_params = Bugzilla->input_params; return $self->_login_to_hash($user);
$input_params->{'Bugzilla_login'} = $params->{login};
$input_params->{'Bugzilla_password'} = $params->{password};
$input_params->{'Bugzilla_restrictlogin'} = $params->{restrict_login};
my $user = Bugzilla->login();
my $result = { id => $self->type('int', $user->id) };
if ($user->{_login_token}) {
$result->{'token'} = $user->id . "-" . $user->{_login_token};
}
return $result;
} }
sub logout { sub logout {
...@@ -384,6 +377,15 @@ sub _report_to_hash { ...@@ -384,6 +377,15 @@ sub _report_to_hash {
return $item; return $item;
} }
sub _login_to_hash {
my ($self, $user) = @_;
my $item = { id => $self->type('int', $user->id) };
if ($user->{_login_token}) {
$item->{'token'} = $user->id . "-" . $user->{_login_token};
}
return $item;
}
1; 1;
__END__ __END__
......
...@@ -150,13 +150,13 @@ sub fix_credentials { ...@@ -150,13 +150,13 @@ sub fix_credentials {
# even if not calling User.login. We also do not delete them as # even if not calling User.login. We also do not delete them as
# User.login requires "login" and "password". # User.login requires "login" and "password".
if (exists $params->{'login'} && exists $params->{'password'}) { if (exists $params->{'login'} && exists $params->{'password'}) {
$params->{'Bugzilla_login'} = $params->{'login'}; $params->{'Bugzilla_login'} = delete $params->{'login'};
$params->{'Bugzilla_password'} = $params->{'password'}; $params->{'Bugzilla_password'} = delete $params->{'password'};
} }
# Allow user to pass token=12345678 as a convenience which becomes # Allow user to pass token=12345678 as a convenience which becomes
# "Bugzilla_token" which is what the auth code looks for. # "Bugzilla_token" which is what the auth code looks for.
if (exists $params->{'token'}) { if (exists $params->{'token'}) {
$params->{'Bugzilla_token'} = $params->{'token'}; $params->{'Bugzilla_token'} = delete $params->{'token'};
} }
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment