Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixing Token Header Auth #1863

Merged
merged 1 commit into from
Jun 7, 2024
Merged

Conversation

ryanrath
Copy link
Contributor

@ryanrath ryanrath commented Jun 7, 2024

Description

  • Added checking the results of the PHP built in function getallheaders() for the presence of the Authorization header due to Silex seeming to remove the header ( or at least it's not present when using request->headers->[all()|get()|has()]

Motivation and Context

So it looks like Silex removes the Authorization header for some reason so I've added a fall back of checking the results of the PHP built in function getallheaders.

I also added a couple of comments to help with reading things after the fact.

Tests performed

Automated Tests.

Checklist:

  • The pull request description is suitable for a Changelog entry
  • The milestone is set correctly on the pull request
  • The appropriate labels have been added to the pull request

So it looks like Silex removes the `Authorization` header for some
reason so I've added a fall back of checking the results of the PHP
built in function `getallheaders`.

I also added a couple of comments to help with reading things after the
fact.
@ryanrath ryanrath added Category:Infrastructure Internal infrastructure updates/changes security Relating to some aspect of security for XDMoD labels Jun 7, 2024
@ryanrath ryanrath added this to the 11.0.0 milestone Jun 7, 2024
@ryanrath ryanrath merged commit 22941db into ubccr:xdmod11.0 Jun 7, 2024
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Category:Infrastructure Internal infrastructure updates/changes security Relating to some aspect of security for XDMoD
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants