strip realm from username (B. Marshall)
This commit is contained in:
		| @@ -10,6 +10,7 @@ | ||||
|   * systemd deployment guide | ||||
|   * document env var for https reverse proxy (B. Marshall) | ||||
|   * [#279] Web sessions use cookies instead of files on disk (M. Johnson) | ||||
|   * strip realm from username (B. Marshall) | ||||
|  | ||||
|   [BUG FIXES] | ||||
|  | ||||
|   | ||||
| @@ -12,13 +12,17 @@ hook 'before' => sub { | ||||
|         if (setting('trust_x_remote_user') | ||||
|           and scalar request->header('X-REMOTE_USER') | ||||
|           and length scalar request->header('X-REMOTE_USER')) { | ||||
|             session(logged_in_user => scalar request->header('X-REMOTE_USER')); | ||||
|  | ||||
|             (my $user = scalar request->header('X-REMOTE_USER')) =~ s/@[^@]*$//; | ||||
|             session(logged_in_user => $user); | ||||
|             session(logged_in_user_realm => 'users'); | ||||
|         } | ||||
|         elsif (setting('trust_remote_user') | ||||
|           and defined $ENV{REMOTE_USER} | ||||
|           and length  $ENV{REMOTE_USER}) { | ||||
|             session(logged_in_user => $ENV{REMOTE_USER}); | ||||
|  | ||||
|             (my $user = $ENV{REMOTE_USER}) =~ s/@[^@]*$//; | ||||
|             session(logged_in_user => $user); | ||||
|             session(logged_in_user_realm => 'users'); | ||||
|         } | ||||
|         elsif (setting('no_auth')) { | ||||
|   | ||||
		Reference in New Issue
	
	Block a user