strip acct: from OWA auth to API endpoints
This commit is contained in:
		| @@ -39,7 +39,7 @@ class Cdav extends \Zotlabs\Web\Controller { | |||||||
|  |  | ||||||
| 					$sigblock = \Zotlabs\Web\HTTPSig::parse_sigheader($_SERVER[$head]); | 					$sigblock = \Zotlabs\Web\HTTPSig::parse_sigheader($_SERVER[$head]); | ||||||
| 					if($sigblock) { | 					if($sigblock) { | ||||||
| 						$keyId = $sigblock['keyId']; | 						$keyId = str_replace('acct:','',$sigblock['keyId']); | ||||||
| 						if($keyId) { | 						if($keyId) { | ||||||
| 							$r = q("select * from hubloc where hubloc_addr = '%s' limit 1", | 							$r = q("select * from hubloc where hubloc_addr = '%s' limit 1", | ||||||
| 								dbesc($keyId) | 								dbesc($keyId) | ||||||
|   | |||||||
| @@ -48,7 +48,7 @@ class Dav extends \Zotlabs\Web\Controller { | |||||||
|  |  | ||||||
| 				$sigblock = \Zotlabs\Web\HTTPSig::parse_sigheader($_SERVER[$head]); | 				$sigblock = \Zotlabs\Web\HTTPSig::parse_sigheader($_SERVER[$head]); | ||||||
| 				if($sigblock) { | 				if($sigblock) { | ||||||
| 					$keyId = $sigblock['keyId']; | 					$keyId = str_replace('acct:','',$sigblock['keyId']); | ||||||
| 					if($keyId) { | 					if($keyId) { | ||||||
| 						$r = q("select * from hubloc where hubloc_addr = '%s' limit 1", | 						$r = q("select * from hubloc where hubloc_addr = '%s' limit 1", | ||||||
| 							dbesc($keyId) | 							dbesc($keyId) | ||||||
|   | |||||||
| @@ -52,6 +52,7 @@ function api_login(&$a){ | |||||||
| 		/* Signature authentication */ | 		/* Signature authentication */ | ||||||
|  |  | ||||||
| 		if(array_key_exists($head,$_SERVER) && substr(trim($_SERVER[$head]),0,9) === 'Signature') { | 		if(array_key_exists($head,$_SERVER) && substr(trim($_SERVER[$head]),0,9) === 'Signature') { | ||||||
|  |  | ||||||
| 			if($head !== 'HTTP_AUTHORIZATION') { | 			if($head !== 'HTTP_AUTHORIZATION') { | ||||||
| 				$_SERVER['HTTP_AUTHORIZATION'] = $_SERVER[$head]; | 				$_SERVER['HTTP_AUTHORIZATION'] = $_SERVER[$head]; | ||||||
| 				continue; | 				continue; | ||||||
| @@ -59,7 +60,7 @@ function api_login(&$a){ | |||||||
|  |  | ||||||
| 			$sigblock = \Zotlabs\Web\HTTPSig::parse_sigheader($_SERVER[$head]); | 			$sigblock = \Zotlabs\Web\HTTPSig::parse_sigheader($_SERVER[$head]); | ||||||
| 			if($sigblock) { | 			if($sigblock) { | ||||||
| 				$keyId = $sigblock['keyId']; | 				$keyId = str_replace('acct:','',$sigblock['keyId']); | ||||||
| 				if($keyId) { | 				if($keyId) { | ||||||
| 					$r = q("select * from hubloc where hubloc_addr = '%s' limit 1", | 					$r = q("select * from hubloc where hubloc_addr = '%s' limit 1", | ||||||
| 						dbesc($keyId) | 						dbesc($keyId) | ||||||
|   | |||||||
		Reference in New Issue
	
	Block a user