Commit graph

5588 commits

Author SHA1 Message Date
Jo-Philipp Wich
abef50b852 libs/web: rework luci.sauth
- perform decoding/encoding transparently in read() and write()
	- remove decode() and encode() helpers
	- introduce reap() to kill expired sessions
2012-08-08 09:48:47 +00:00
Jo-Philipp Wich
a58370ab74 Rework authentication system
The validity of authentication tokens was determined by the
mtime of respective authentication tokens on filesystem
stored in $sessionpath.
Talking about hardware without RTC or without a prior
connection to a time server, date/time usually around 1970 -
so is the mtime of the authentication token file in
$sessionpath.

When now configuring an internet connection via LuCI, the
system might fetch the current date/time (e.g. via ntp)
which invalidates the token, returns "403 Forbidden" and
kicks the user out of the interface.

This patch changes the authentication system to use time values
based on the uptime of the machine - rather than values based upon
gettimeofday() and {a|m}time values - and save them inside the token.
That way can always determine the difference between login
(last interaction respectively) and the current time, in-
dependant of the system clock jumping backwards/forwards.

Warning: This patch removes the clean() function and respective calls.
This means, invalid tokens will NOT be determined and removed from
filesystem automatically anymore.
Before, every HTTP-call caused a scan for invalid tokens,
which is quite expensive. Instead consider using a cron job
deleting all stalled files periodically.

Contributed by T-Labs, Deutsche Telekom Innovation Laboratories

Signed-off-by: Mirko Vogt <mirko@openwrt.org>
2012-08-07 19:11:56 +00:00
Jo-Philipp Wich
69aa218335 return "403 Forbidden" if authentication token was given, however is invalid
Contributed by T-Labs, Deutsche Telekom Innovation Laboratories

Signed-off-by: Mirko Vogt <mirko@openwrt.org>
2012-08-07 19:11:52 +00:00
Manuel Munz
0c4edd49b9 meshwizard: Fix olsrd plugin setup/renaming 2012-08-02 18:32:41 +00:00
Manuel Munz
6574b8147c contrib/meshwizard: enable auto-ipv6 in meshwizard, removed radvd config 2012-08-02 16:40:24 +00:00
Manuel Munz
71d4bb6f46 contrib/meshwizard: IPv6 fixes 2012-08-02 14:41:30 +00:00
Manuel Munz
d21dc5cfa6 contrib/community_profiles: Update augsburg 2012-08-02 10:32:07 +00:00
Manuel Munz
a1ce6b9a60 contrib/meshwizard: Allow to setup dropbear autorized_keys 2012-07-26 09:45:48 +00:00
Jo-Philipp Wich
c8ae5c37c5 po: sync ushare translation 2012-07-24 11:55:14 +00:00
Jo-Philipp Wich
b252792ad7 applications/luci-ushare: add description (#458) 2012-07-24 11:54:29 +00:00
Jo-Philipp Wich
a798da5d8b libs/web: support creating networks in checkbox network widget (#457) 2012-07-24 11:48:03 +00:00
Jo-Philipp Wich
3c1c9d4400 modules/admin-full: copy bssid when joining a network as client (#455) 2012-07-24 11:37:38 +00:00
Jo-Philipp Wich
746a5be1a8 modules/admin-full: expose wmm option for mac80211 interfaces 2012-07-23 08:53:50 +00:00
Jo-Philipp Wich
46c84206f3 libs/sys: workaround broken entries in /proc/net/ipv6_route, observed on brcm-2.4 2012-07-18 11:22:10 +00:00
Jo-Philipp Wich
05a1632670 contrib/package: make freifunk-watchdog more generic
This change is based on a patch by "flyn" from https://dev.openwrt.org/ticket/11868 .
2012-07-15 17:25:24 +00:00
Manuel Munz
dc7cf4417d contrib/meshwizard: allowssh and allowweb can be set for wan dhcp proto too now 2012-07-09 17:57:24 +00:00
Manuel Munz
1e7a41732f modules:admin_full: remove empty directory in view 2012-07-09 09:51:17 +00:00
Manuel Munz
fc86236180 applications/luci-openvpn: Change enable to enabled, #352 2012-07-09 06:25:04 +00:00
Manuel Munz
16c7706442 applications/luci-tinyproxy: Change enable option to enabled, #404 2012-07-09 06:08:17 +00:00
Manuel Munz
0e0c3d7785 contrib/community-profiles: Add weimar, #446 2012-07-09 05:53:28 +00:00
Manuel Munz
d0a6fbf397 mod-freifunk: Fix problem with osm map, OpenLayers.Control.MouseDefaults() was removed in OpenLayers 2.12 2012-07-09 05:48:37 +00:00
Jo-Philipp Wich
13c3471eb3 modules/admin-full: fix frequency display on index status page 2012-07-06 01:21:27 +00:00
Daniel Golle
13c82e0792 update arig.org.il community profiles 2012-07-05 04:37:12 +00:00
Daniel Golle
50ca6030d5 add IPv6 and MTU override for L2TP
Signed-off-by: Daniel Golle <dgolle@allnet.de>
2012-07-05 04:22:16 +00:00
Jo-Philipp Wich
df77c736be protocols/ppp: add mtu options to all ppp protocols, add lcp options to pptp 2012-07-04 10:02:21 +00:00
Jo-Philipp Wich
30a0e92e22 build: i18n-sync.sh: also recreate base.pot 2012-07-01 22:58:17 +00:00
Jo-Philipp Wich
e68ef54e88 po: resync translations 2012-07-01 22:58:12 +00:00
Jo-Philipp Wich
0b0df324bf build: fixup header order in i18n-update.pl to minimize diffs to pootle 2012-07-01 22:46:49 +00:00
Translation System
4f5638af1d Commit from LuCI Translation Portal by user jow.: 802 of 826 messages translated (0 fuzzy). 2012-07-01 22:02:37 +00:00
Translation System
4236e2d958 Commit from LuCI Translation Portal by user jow.: 64 of 105 messages translated (3 fuzzy). 2012-07-01 21:59:13 +00:00
Translation System
430e0012e9 Commit from LuCI Translation Portal by user jow.: 3 of 4 messages translated (0 fuzzy). 2012-07-01 21:58:59 +00:00
Translation System
240a4b1623 Commit from LuCI Translation Portal by user jow.: 31 of 31 messages translated (0 fuzzy). 2012-07-01 21:57:25 +00:00
Translation System
5007ecc01c Commit from LuCI Translation Portal by user jow.: 9 of 11 messages translated (0 fuzzy). 2012-07-01 21:47:06 +00:00
Translation System
05451e77f1 Commit from LuCI Translation Portal by user jow.: 41 of 43 messages translated (0 fuzzy). 2012-07-01 21:47:04 +00:00
Translation System
a91e90da66 Commit from LuCI Translation Portal by user jow.: 0 of 64 messages translated (0 fuzzy). 2012-07-01 21:46:57 +00:00
Translation System
d61f5ff3a4 Commit from LuCI Translation Portal by user jow.: 0 of 13 messages translated (0 fuzzy). 2012-07-01 21:46:46 +00:00
Translation System
779771848d Commit from LuCI Translation Portal by user jow.: 0 of 34 messages translated (0 fuzzy). 2012-07-01 21:46:44 +00:00
Translation System
952310cd96 Commit from LuCI Translation Portal by user jow.: 0 of 9 messages translated (0 fuzzy). 2012-07-01 21:46:42 +00:00
Translation System
1af00e8f67 Commit from LuCI Translation Portal by user jow.: 0 of 10 messages translated (0 fuzzy). 2012-07-01 21:46:38 +00:00
Translation System
7bef0d054c Commit from LuCI Translation Portal by user jow.: 0 of 105 messages translated (0 fuzzy). 2012-07-01 21:46:36 +00:00
Translation System
d16ad3945e Commit from LuCI Translation Portal by user jow.: 0 of 63 messages translated (0 fuzzy). 2012-07-01 21:46:32 +00:00
Translation System
4161c2252d Commit from LuCI Translation Portal by user jow.: 0 of 5 messages translated (0 fuzzy). 2012-07-01 21:46:30 +00:00
Translation System
583c1a7921 Commit from LuCI Translation Portal by user jow.: 21 of 21 messages translated (0 fuzzy). 2012-07-01 21:46:28 +00:00
Translation System
edf0084fd8 Commit from LuCI Translation Portal by user jow.: 826 of 826 messages translated (0 fuzzy). 2012-07-01 21:46:25 +00:00
Translation System
cd554b998e Commit from LuCI Translation Portal by user jow.: 1 of 31 messages translated (0 fuzzy). 2012-07-01 21:46:22 +00:00
Jo-Philipp Wich
8259552622 protocols/core: fix dhcp defaultroute option 2012-07-01 20:40:02 +00:00
Daniel Golle
5be59e6ae7 Cosmetic changes to the terminology in the UI:
Replace references to the device running LuCI as being a "router", as that is
not necessarily the case.
2012-07-01 20:05:05 +00:00
Manuel Munz
9b1f4dfee3 contrib/freifunk-policyrouting: Fix deletion of rules; add fallback option to use the mesh gateway if the own gateway is not available 2012-07-01 00:01:38 +00:00
Translation System
76106a11b9 Commit from LuCI Translation Portal by user jow.: 2 of 2 messages translated (0 fuzzy). 2012-06-29 12:56:50 +00:00
Translation System
02779313c6 Commit from LuCI Translation Portal by user jow.: 10 of 11 messages translated (0 fuzzy). 2012-06-29 12:56:47 +00:00