[obs-commits] [openSUSE/open-build-service] 85de8b: [api] Force login for all API calls

1 Dec 2015

      Branch: refs/heads/master
  Home:   https://github.com/openSUSE/open-build-service
  Commit: 85de8b8e783618dbeb1ac220aba2b6d3fea510ca
      https://github.com/openSUSE/open-build-service/commit/85de8b8e783618dbeb1ac2...
  Author: Christian Bruckmayer <christian@bruckmayer.net>
  Date:   2015-12-01 (Tue, 01 Dec 2015)

  Changed paths:
    M src/api/app/controllers/about_controller.rb
    M src/api/app/controllers/application_controller.rb
    M src/api/app/controllers/comments_controller.rb
    M src/api/app/controllers/configurations_controller.rb
    M src/api/app/controllers/distributions_controller.rb
    M src/api/app/controllers/group_controller.rb
    M src/api/app/controllers/issue_trackers_controller.rb
    M src/api/app/controllers/issues_controller.rb
    M src/api/app/mixins/forbids_anonymous_users.rb
    M src/api/test/functional/configurations_controller_test.rb
    M src/api/test/functional/distributions_controller_test.rb
    M src/api/test/functional/issue_controller_test.rb
    M src/api/test/functional/issue_trackers_controller_test.rb
    M src/api/test/functional/read_permission_test.rb
    M src/api/test/functional/source_controller_test.rb

  Log Message:
  -----------
  [api] Force login for all API calls

Except /public, /trigger and /about route. This is necessary to be consistent with our public instance which
uses the iChain login proxy and forces also login for all request except the described ones.
Furthermore this caused a bug in the project list because OSC always tries to access a route without
user credentials and only sends the credentials when the route returns 401. This was not the case for
the project list and it was not possible to receive for instance hidden projects.
Fix #833

  Commit: 916fa5ca5b722fe2caa07b453aa21d4776649dd5
      https://github.com/openSUSE/open-build-service/commit/916fa5ca5b722fe2caa07b...
  Author: Christian Bruckmayer <cbruckmayer@suse.com>
  Date:   2015-12-01 (Tue, 01 Dec 2015)

  Changed paths:
    M src/api/app/controllers/about_controller.rb
    M src/api/app/controllers/application_controller.rb
    M src/api/app/controllers/comments_controller.rb
    M src/api/app/controllers/configurations_controller.rb
    M src/api/app/controllers/distributions_controller.rb
    M src/api/app/controllers/group_controller.rb
    M src/api/app/controllers/issue_trackers_controller.rb
    M src/api/app/controllers/issues_controller.rb
    M src/api/app/mixins/forbids_anonymous_users.rb
    M src/api/test/functional/configurations_controller_test.rb
    M src/api/test/functional/distributions_controller_test.rb
    M src/api/test/functional/issue_controller_test.rb
    M src/api/test/functional/issue_trackers_controller_test.rb
    M src/api/test/functional/read_permission_test.rb
    M src/api/test/functional/source_controller_test.rb

  Log Message:
  -----------
  Merge pull request #1410 from ChrisBr/force_login_833

[api] Force login for all API calls

Compare: https://github.com/openSUSE/open-build-service/compare/77cd7f196557...916fa5...