tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

#13035 changed name of token

This commit is contained in:
Daniel Cebrian 2024-04-10 17:01:20 +02:00
parent 7c1cc07ea9
commit bcf2927660
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pandora_console/include/javascript/pandora.js
View File

@ -2757,7 +2757,7 @@ function redirectNode(url, target = "_blank") {
if (data.success) {
var $input = $("<input>")
.attr("type", "hidden")
.attr("name", "token")
.attr("name", "auth_token")
.val(data.data);
$form.append($input);
}

8
pandora_console/index.php
View File

@ -755,10 +755,10 @@ if (isset($config['id_user']) === false) {
header('Location: '.ui_get_full_url('index.php'.$redirect_url));
exit;
// Always exit after sending location headers.
} else if (isset($_POST['token']) === true && (bool) $config['JWT_signature'] !== false) {
} else if (isset($_POST['auth_token']) === true && (bool) $config['JWT_signature'] !== false) {
include_once $config['homedir'].'/include/class/JWTRepository.class.php';
$jwt = new JWTRepository($config['JWT_signature']);
if ($jwt->setToken($_POST['token']) && $jwt->validate()) {
if ($jwt->setToken($_POST['auth_token']) && $jwt->validate()) {
$id_user = $jwt->payload()->get('id_user');
db_logon($id_user, $_SERVER['REMOTE_ADDR']);
$_SESSION['id_usuario'] = $id_user;
@ -956,10 +956,10 @@ if (isset($config['id_user']) === false) {
exit('</html>');
}
} else {
if (isset($_POST['token']) === true && (bool) $config['JWT_signature'] !== false) {
if (isset($_POST['auth_token']) === true && (bool) $config['JWT_signature'] !== false) {
include_once $config['homedir'].'/include/class/JWTRepository.class.php';
$jwt = new JWTRepository($config['JWT_signature']);
if ($jwt->setToken($_POST['token']) && $jwt->validate()) {
if ($jwt->setToken($_POST['auth_token']) && $jwt->validate()) {
$iduser = $_SESSION['id_usuario'];
unset($_SESSION['id_usuario']);
unset($iduser);