Difuse/luci
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

luci-base: dispatcher: fix rpc controller regression

Browse source 
When testing the luci-rpc authnetication, avoid clobbering the HTTP
post request body.

Fixes: #3470
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
This commit is contained in:
Jo-Philipp Wich 2020-01-07 09:08:49 +01:00
parent 4b22060823
commit 38c9c9e0a2
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
modules/luci-base/luasrc/dispatcher.lua
View file

@ -305,7 +305,7 @@ local function tree_to_json(node, json)
elseif subname == "rpc" and subnode.module == "luci.controller.rpc" then elseif subname == "rpc" and subnode.module == "luci.controller.rpc" then
spec.auth = { spec.auth = {
login = false, login = false,
methods = { "param:auth", "cookie:sysauth" } methods = { "query:auth", "cookie:sysauth" }
} }
elseif subnode.module == "luci.controller.admin.uci" then elseif subnode.module == "luci.controller.admin.uci" then
spec.auth = { spec.auth = {
@ -546,6 +546,8 @@ local function check_authentication(method)
sid = http.getcookie(auth_param) sid = http.getcookie(auth_param)
elseif auth_type == "param" then elseif auth_type == "param" then
sid = http.formvalue(auth_param) sid = http.formvalue(auth_param)
elseif auth_type == "query" then
sid = http.formvalue(auth_param, true)
end end
return session_retrieve(sid) return session_retrieve(sid)