mirror of
https://github.com/danieldemus/openhab-core.git
synced 2025-01-11 13:41:53 +01:00
426bd112b7
Currently the AuthFilter will try to find a token in the X-OPENHAB-TOKEN HTTP header - only when it finds a cookie named X-OPENHAB-AUTH-HEADER. It can cause problems because browsers or proxies might block the cookie from being sent for various reasons (for instance if there's a path set for it). There is no downside IMHO to always try to fallback to checking the X-OPENHAB-TOKEN header for a token, if and only if it's not already provided in the Authorization header. It is the responsibility of the client to decide how it wants to authorize the request among the available options - by checking a cookie, or something else entirely. Also removed the '?api_key=' option because Swagger UI doesn't provide tokens that way anymore. Signed-off-by: Yannick Schaus <github@schaus.net> |
||
|---|---|---|
| .. | ||
| src/main/java/org/openhab/core/io/rest/auth/internal | ||
| .classpath | ||
| .project | ||
| NOTICE | ||
| pom.xml | ||