Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[7028]Lock down cookie based authentication on API endpoints [PART ONE] #7058

Conversation

TomeCirun
Copy link
Contributor

Fixes #7028

Proposed fixes:

Features:

  • includes tests covering changes
  • includes updated documentation
  • includes user-visible changes
  • includes API changes
  • includes bugfix for possible backport

Please [X] all the boxes above that apply

@amercader amercader self-assigned this Sep 6, 2022
Copy link
Member

@amercader amercader left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@TomeCirun see comment, also:

  • The recline_view is not working, we need to send the CSRF token somewhere in this file (probably here)
  • I think that the Datatables view is working fine (there is JS error that seems unrelated) but please check all functionalities in case I missed a call
  • Please replicate all changes made in the public folder in the public-bs3 one

ckan/public/base/javascript/module.js Outdated Show resolved Hide resolved
@amercader amercader merged commit 8b5b8e5 into ckan:master Sep 19, 2022
@amercader
Copy link
Member

Thanks @TomeCirun ! I added the missing recline_view bit in f7ac8b8

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Lock down cookie based authentication on API endpoints
2 participants