eliseuamaro/gnu-social
1
0
Fork 0
forked from GNUsocial/gnu-social
Code Issues Pull Requests Releases Wiki Activity

Present WWW-Authenticate on failure to authenticate

Browse Source
This commit is contained in:
Mikael Nordfeldth 2014-11-10 12:17:39 +01:00
parent b6a168c82e
commit 34f6ea1d04
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/apiauthaction.php
View File

@ -317,11 +317,14 @@ class ApiAuthAction extends ApiAction
$this->auth_user_nickname $this->auth_user_nickname
); );
$this->logAuthFailure($msg); $this->logAuthFailure($msg);
// We must present WWW-Authenticate in accordance to HTTP status code 401
header('WWW-Authenticate: Basic realm="' . $realm . '"');
// TRANS: Client error thrown when authentication fails. // TRANS: Client error thrown when authentication fails.
$this->clientError(_('Could not authenticate you.'), 401); $this->clientError(_('Could not authenticate you.'), 401);
} }
} else { } else {
// all get rw access for actions that don't need auth // all get rw access for actions that don't require auth
$this->access = self::READ_WRITE; $this->access = self::READ_WRITE;
} }
} }