gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-05-09 13:06:14 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

allo echo without authentication

Browse Source
This commit is contained in:
Uwe Steinmann 2021-11-26 09:43:06 +01:00
parent a4bb363799
commit 248f11653a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
restapi/index.php
View File

@ -2367,9 +2367,9 @@ class Auth { /* {{{ */
}
/* The preflight options request doesn't have authorization in the header. So
* don't even try to authorize.
*/
*/
if($request->getMethod() == 'OPTIONS') {
} elseif(!in_array($request->getUri()->getPath(), array('echo', 'login'))) {
} elseif(!in_array($request->getUri()->getPath(), array('login')) && substr($request->getUri()->getPath(), 0, 5) != 'echo/') {
$userobj = null;
if(!empty($this->container->environment['HTTP_AUTHORIZATION']) && !empty($settings->_apiKey) && !empty($settings->_apiUserId)) {
if($settings->_apiKey == $this->container->environment['HTTP_AUTHORIZATION']) {