Difuse/luci
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

luci-mod-rpc: drop "secret" value from rpc session objects

Browse source 
Drop the "secret" value from RPC session objects in order to make them
compatible with ordinary web sessions used by the LuCI web interface.

That secret value was never used for anything and is the only difference
compared to normal LuCI login sessions.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
This commit is contained in:
Jo-Philipp Wich 2019-01-30 16:48:51 +01:00
parent 74e4cf56c6
commit 766643fcf1
1 changed files with 2 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
modules/luci-mod-rpc/luasrc/controller/rpc.lua
View file

@ -14,7 +14,6 @@ function session_retrieve(sid, allowed_users)
if type(sdat) == "table" and
type(sdat.values) == "table" and
type(sdat.values.token) == "string" and
type(sdat.values.secret) == "string" and
type(sdat.values.username) == "string" and
util.contains(allowed_users, sdat.values.username)
then
@ -78,8 +77,7 @@ function rpc_auth()
util.ubus("session", "set", {
ubus_rpc_session = login.ubus_rpc_session,
values = {
token = sys.uniqueid(16),
secret = sys.uniqueid(16)
token = sys.uniqueid(16)
}
})
@ -87,8 +85,7 @@ function rpc_auth()
if sdat then
return {
sid = sid,
token = sdat.token,
secret = sdat.secret
token = sdat.token
}
end
end