You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@allura.apache.org by jo...@apache.org on 2014/03/19 21:02:01 UTC
git commit: [#6701] Don't send usernames and passwords in the URI
(ends up in logs)
Repository: incubator-allura
Updated Branches:
refs/heads/cj/6701 9dd51338e -> 49bb63dd3
[#6701] Don't send usernames and passwords in the URI (ends up in logs)
Signed-off-by: Cory Johns <cj...@slashdotmedia.com>
Project: http://git-wip-us.apache.org/repos/asf/incubator-allura/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-allura/commit/49bb63dd
Tree: http://git-wip-us.apache.org/repos/asf/incubator-allura/tree/49bb63dd
Diff: http://git-wip-us.apache.org/repos/asf/incubator-allura/diff/49bb63dd
Branch: refs/heads/cj/6701
Commit: 49bb63dd36bda25466dbb5521b61563249eede43
Parents: 9dd5133
Author: Cory Johns <cj...@slashdotmedia.com>
Authored: Wed Mar 19 20:01:51 2014 +0000
Committer: Cory Johns <cj...@slashdotmedia.com>
Committed: Wed Mar 19 20:01:51 2014 +0000
----------------------------------------------------------------------
scripts/ApacheAccessHandler.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-allura/blob/49bb63dd/scripts/ApacheAccessHandler.py
----------------------------------------------------------------------
diff --git a/scripts/ApacheAccessHandler.py b/scripts/ApacheAccessHandler.py
index 390dca3..6575a6f 100644
--- a/scripts/ApacheAccessHandler.py
+++ b/scripts/ApacheAccessHandler.py
@@ -92,7 +92,7 @@ def check_repo_path(req):
def check_authentication(req):
auth_url = req.get_options().get('ALLURA_AUTH_URL', 'https://127.0.0.1/auth/do_login')
- r = requests.post(auth_url, allow_redirects=False, params={
+ r = requests.post(auth_url, allow_redirects=False, data={
'username': req.user,
'password': req.get_basic_auth_pw(),
'return_to': '/login_successful'})