Commit Graph

14 Commits (236d82d36faba46c2fab98e00d74f3b344ad77e2)

Author SHA1 Message Date
Stéphane Bidoul c2fec40d13 auth_http_remote_user: test if already authenticated based on login instead of uid
Avoids a database query unless authentication is actually required.
2014-08-05 09:24:50 +02:00
Stéphane Bidoul 5e79ce29dc auth_from_http_remote_user: remove unneeded browse 2014-08-04 17:53:24 +02:00
Stéphane Bidoul 68e96cd782 auth_http_remote_user: slight reorganization and some comments (logic remains identical) 2014-08-04 17:50:13 +02:00
Laurent Mignon (aka lmi) 436ffcd53f If HTTP_REMOTE_USER is in the request headers and no corresponding user is found in odoo always issues Unauthorized (avoid redirect to the login page)
If the uid in the session is not the same as the one from the binded HTTP_REMOTE_USER, always logout to clean up the session
2014-08-04 16:42:02 +02:00
Laurent Mignon (aka lmi) 8c7115e2d3 [FIX] return 'None' if no user name is found in the request hearder 2014-08-04 15:08:47 +02:00
Laurent Mignon (aka lmi) 97f491724f [PEP8] 2014-08-04 13:00:44 +02:00
Laurent Mignon (aka lmi) d68a47f05f [FIX] always check the uid in the session and the one in the request to avoid session mismatch... 2014-08-04 12:55:58 +02:00
Laurent Mignon (aka lmi) a70e13365d [FIX] properlyt return the Unauthorized() response to avoid warning in the log file 2014-08-04 12:20:26 +02:00
Laurent Mignon (aka lmi) 1675ae6fbf Code simplification: remove overkill method 2014-08-04 12:03:16 +02:00
Laurent Mignon (aka lmi) 8f9fcae4dc Addons configuration parameter is now a field part of the Authentication group from base_setup 2014-08-04 11:48:09 +02:00
Laurent Mignon 9b99c2dc57 [FIX] if the default login page is disabled, redirect with *401* 2014-07-30 11:05:07 +02:00
Laurent Mignon 2f51036928 [PEP8] line lenght is now ridiculous (80 chars) 2014-07-30 11:03:37 +02:00
Laurent Mignon c893a706b8 port auth_from_http_remote_user to 8.0 2014-07-30 10:23:52 +02:00
Laurent Mignon 7dd5bc685e [ADD] This module initialize the session by looking for the field HTTP_REMOTE_USER in the HEADER of the HTTP request and trying^Co bind the given value to a user 2014-07-25 16:42:26 +02:00