[asterisk-bugs] [Asterisk 0010961]: [patch] Add HTTP Basic & Digest Auth (rfc2617) for manager web interface.

Asterisk Bug Tracker noreply at bugs.digium.com
Thu Apr 23 15:36:37 CDT 2009


A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=10961 
====================================================================== 
Reported By:                ys
Assigned To:                tilghman
====================================================================== 
Project:                    Asterisk
Issue ID:                   10961
Category:                   Core/NewFeature
Reproducibility:            N/A
Severity:                   feature
Priority:                   normal
Status:                     assigned
Asterisk Version:           SVN 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases):  trunk 
SVN Revision (number only!): 85514 
Request Review:              
====================================================================== 
Date Submitted:             2007-10-12 06:48 CDT
Last Modified:              2009-04-23 15:36 CDT
====================================================================== 
Summary:                    [patch] Add HTTP Basic & Digest Auth (rfc2617) for
manager web interface.
Description: 
I found, that manager web interface used "Cookie" Header for authenticate
the user. This require two http request, one for authenticate and next for
commands.
This patch add only Basic authentication scheme implementation, as defined
in rfc2617.
If used this scheme, httptimeout are unused, but we don't need to keep a
http session (and mansession) alive, after HTTP Request is processed.







======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0011414 [patch] Move loading users from authent...
====================================================================== 

---------------------------------------------------------------------- 
 (0103726) svnbot (reporter) - 2009-04-23 15:36
 http://bugs.digium.com/view.php?id=10961#c103726 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 190349

U   trunk/include/asterisk/http.h
U   trunk/include/asterisk/utils.h
U   trunk/main/astobj2.c
U   trunk/main/http.c
U   trunk/main/manager.c
U   trunk/main/utils.c
U   trunk/res/res_http_post.c
U   trunk/res/res_phoneprov.c

------------------------------------------------------------------------
r190349 | tilghman | 2009-04-23 15:36:36 -0500 (Thu, 23 Apr 2009) | 10
lines

Support HTTP digest authentication for the http manager interface.
(closes issue http://bugs.digium.com/view.php?id=10961)
 Reported by: ys
 Patches: 
       digest_auth_r148468_v5.diff uploaded by ys (license 281)
       SVN branch
http://svn.digium.com/svn/asterisk/team/group/manager_http_auth
 Tested by: ys, twilson, tilghman
 Review: http://reviewboard.digium.com/r/223/
 Reviewed by: tilghman,russellb,mmichelson

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=190349 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-04-23 15:36 svnbot         Checkin                                      
2009-04-23 15:36 svnbot         Note Added: 0103726                          
======================================================================




More information about the asterisk-bugs mailing list