[Rt-commit] rt branch, 5.0/core-rt-authentoken, repushed

Craig Kaiser craig at bestpractical.com
Thu May 7 15:30:54 EDT 2020


The branch 5.0/core-rt-authentoken was deleted and repushed:
       was 9f53bca7004de07d001916eeb03777edd8ed5219
       now 0f005b83ff49104b8de55503ba8061e5f39765e8

1: 7043b5c06d = 1: 549b57065e Core RT::Authen::Token
2: 6bc02ace62 = 2: e3979eb579 Migrate to elevator theme
3: db91f74aa3 ! 3: e7043c1549 Migrate Authen-Token code to work like other RT pages
    @@ -1,18 +1,6 @@
     Author: Craig <craig at bestpractical.com>
     
         Migrate Authen-Token code to work like other RT pages
    -
    -diff --git a/lib/RT/Authen/Token.pm b/lib/RT/Authen/Token.pm
    ---- a/lib/RT/Authen/Token.pm
    -+++ b/lib/RT/Authen/Token.pm
    -@@
    - Apache configuration to allow RT to access the Authorization header.
    - 
    -     SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
    -+
    - =cut
    - 
    - 1;
     
     diff --git a/lib/RT/Authen/Token/AuthToken.pm b/lib/RT/Authen/Token/AuthToken.pm
     --- a/lib/RT/Authen/Token/AuthToken.pm
    @@ -410,11 +398,7 @@
     +
     +<div class="form-row">
     +    <div class="col-12">
    -+    <p><&|/l&>Authentication tokens allow other applications to use your user
    -+        account without having to share your password, while allowing you to
    -+        revoke access on an application-specific basis. Changing your password
    -+        <em>does not</em> invalidate your auth tokens; you must revoke them here.
    -+    </&></p>
    ++    <p><&|/l&>Authentication tokens allow other applications to use your user account without having to share your password, while allowing you to revoke access on an application-specific basis. Changing your password <em>does not</em> invalidate your auth tokens; you must revoke them here.</&></p>
     +    </div>
     +
     +% if ( $Authstring ) {
    @@ -422,10 +406,7 @@
     +    <div class="modal-dialog modal-dialog-centered" role="document">
     +        <div class="modal-content">
     +        <div class="modal-header">
    -+            <&|/l, $Description &>This is your new authentication token. Treat
    -+            it carefully like a password. Please save it now because you cannot
    -+            access it again.
    -+            </&>
    ++            <&|/l,$Description &>This is your new authentication token. Treat it carefully like a password. Please save it now because you cannot access it again.</&>
     +            <a id="auth-token-close-modal" href="javascript:void(0)" class="close" data-dismiss="modal" aria-label="Close">
     +            <span aria-hidden="true">×</span>
     +            </a>
4: 9f53bca700 ! 4: 0f005b83ff Add documentation for using token auth
    @@ -33,3 +33,25 @@
      =head3 mod_fcgid
      
      B<WARNING>: Before mod_fcgid 2.3.6, the maximum request size was 1GB.
    +
    +diff --git a/lib/RT/Authen/Token.pm b/lib/RT/Authen/Token.pm
    +--- a/lib/RT/Authen/Token.pm
    ++++ b/lib/RT/Authen/Token.pm
    +@@
    + 
    + RT-Authen-Token - token-based authentication
    + 
    ++=cut
    ++
    + =head1 DESCRIPTION
    + 
    + This module adds the ability for users to generate and login with
    +@@
    + database just like passwords, and so cannot be recovered after they are
    + generated.
    + 
    +-=item Update your Apache configuration
    ++=head2 Update your Apache configuration
    + 
    + If you are running RT under Apache, add the following directive to your RT
    + Apache configuration to allow RT to access the Authorization header.



More information about the rt-commit mailing list