Просмотр исходного кода

added the api_login key as a synonym for login for authorization via the API

root 2 месяцев назад
Родитель
Сommit
77e4988452
1 измененных файлов с 6 добавлено и 2 удалено
  1. 6 2
      html/inc/auth.utils.php

+ 6 - 2
html/inc/auth.utils.php

@@ -422,10 +422,14 @@ function get_client_ip() {
 function IsSilentAuthenticated($db) {
 function IsSilentAuthenticated($db) {
     $auth_ip = get_client_ip();
     $auth_ip = get_client_ip();
     $api_key = getParam('api_key', null, null, FILTER_SANITIZE_STRING);
     $api_key = getParam('api_key', null, null, FILTER_SANITIZE_STRING);
-    $login   = getParam('login', null, null, FILTER_SANITIZE_STRING);
+    $login = getParam('login', null, null, FILTER_SANITIZE_STRING);
+    if ($login === null || $login === '') {
+        $login = getParam('api_login', null, null, FILTER_SANITIZE_STRING);
+    }
     LOG_DEBUG($db, "Silent auth parameters login => {$login} from {$auth_ip}");
     LOG_DEBUG($db, "Silent auth parameters login => {$login} from {$auth_ip}");
     if (empty($login) || empty($api_key) || strlen($api_key) < 20) {
     if (empty($login) || empty($api_key) || strlen($api_key) < 20) {
-        LOG_WARNING($db, "Silent auth failed from {$auth_ip} - missing parameters");
+        LOG_WARNING($db, "API: Silent auth failed from {$auth_ip} - missing parameters");
+        LOG_DEBUG($db, "API: not enough parameters | GET: " . json_encode($_GET, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES) . " | POST: " . json_encode($_POST, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
         return false;
         return false;
     }
     }