fu: Close-up of Fu, bringing a scoop of water to her mouth (Default)
fu ([personal profile] fu) wrote in [site community profile] changelog2011-01-21 07:07 am

[dw-free] Digest authorization popup uses "lj" as the realm

[commit: http://hg.dwscoalition.org/dw-free/rev/dbbcd403e86c]

http://bugs.dwscoalition.org/show_bug.cgi?id=3414

Use site-specific variable, instead of hardcoding "lj" to identify the site.

Patch by [personal profile] fu.

Files modified:
  • cgi-bin/ljlib.pl
--------------------------------------------------------------------------------
diff -r 3b443196fc5d -r dbbcd403e86c cgi-bin/ljlib.pl
--- a/cgi-bin/ljlib.pl	Sun Jan 16 22:16:51 2011 -0600
+++ b/cgi-bin/ljlib.pl	Fri Jan 21 15:07:37 2011 +0800
@@ -883,7 +883,7 @@ sub auth_digest {
         my $stale = shift;
 
         my $nonce = LJ::challenge_generate(180); # 3 mins timeout
-        my $authline = "Digest realm=\"lj\", nonce=\"$nonce\", algorithm=MD5, qop=\"auth\"";
+        my $authline = "Digest realm=\"$LJ::SITENAMESHORT\", nonce=\"$nonce\", algorithm=MD5, qop=\"auth\"";
         $authline .= ", stale=\"true\"" if $stale;
         $r->header_out("WWW-Authenticate", $authline);
         $r->status_line("401 Authentication required");
--------------------------------------------------------------------------------