tyler.durden
/
icingaweb2
mirror of https://github.com/Icinga/icingaweb2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Allow basic auth for API requests only 

refs #11151
This commit is contained in:
Alexander A. Klimov 2016-02-15 10:53:32 +01:00
parent dc9cfc1c81
commit a464e74aa4
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
library/Icinga/Authentication/Auth.php
View File

@ -270,7 +270,7 @@ class Auth
}
/**
* Attempt to authenticate a user using HTTP authentication
* Attempt to authenticate a user using HTTP authentication on API requests only
*
* Supports only the Basic HTTP authentication scheme. XHR will be ignored.
*
@ -279,7 +279,7 @@ class Auth
protected function authHttp()
{
$request = $this->getRequest();
if ($request->isXmlHttpRequest()) {
if ($request->isXmlHttpRequest() || ! $request->isApiRequest()) {
return false;
}
if (($header = $request->getHeader('Authorization')) === false) {