entrouvert
/
ckanext-ozwillo-pyoidc
Archived
17
0
Fork 0
Code Issues Pull Requests Releases Activity

on authentication set cookie secure and http only (#6554)

This commit is contained in:
Serghei Mihai 2015-02-26 12:13:37 +01:00
parent 1c8b9fc4ff
commit f1d53ae8e5
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ckanext/ozwillo_pyoidc/plugin.py
View File

@ -2,11 +2,11 @@ import logging
import ckan.plugins as plugins
import ckan.plugins.toolkit as toolkit
from ckan.common import session, c, request
from ckan.common import session, c, request, response
from ckan import model
import ckan.lib.base as base
from pylons import config, request
from pylons import config
import conf
from oidc import create_client
@ -76,6 +76,10 @@ class OzwilloPyoidcPlugin(plugins.SingletonPlugin):
toolkit.c.userobj = userobj
def login(self):
for cookie in request.cookies:
value = request.cookies.get(cookie)
response.set_cookie(cookie, value, secure=True, httponly=True)
if 'organization_id' in session:
g = model.Group.get(session['organization_id'])
client = Clients.get(g)