CVS log for loncom/auth/checkauthen.pm

Up to [LON-CAPA] / loncom / auth

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

- Only store tiny url as firsturl form item in %env if initial request,
  so as not to break LTI provider functionality for /adm/lti/tiny/$dom/id

- Bug 6400.
  - Direct access (after successful authentication) for shortened URL.

- Bug 6800
  - Move HTML files used for pop-up window in reactionresponse to
    /adm/reactionresponse directory to support public access.
  - Replace use of &EXT('query.') with javascript to retrieve values for
    reaction, field and id from query string, and replace call to &xmlparse()
    with HTML entity to provide rightarrow.

- Bug 6800

- Fix typo in documentation.

- For public user (e.g., unauthenticated user viewing syllabus etc.)
  set $r->user() to public:public, just in case there a username of
  "public" is a real institutional username (and SSO is in use).
- Prevent public user being identified as SSO-authenticated user without
  LON-CAPA username.

- Direct access (after successful authentication) if the orginal URL does not
  require a role (User Prefences or Course Requests).

- Support Apache 2.4
  - PerlAuthenHandler needs to set $r->user() for requests for <Location>
    directives which include Require valid-user
  - reverse changes in publiccheck.pm rev. 1.20 and 1.21
  - modify changes in lonacc.pm rev. 1.143 and 1.147
  - reverse changes in lonnet.pm rev. 1.1212 and 1.1213, and modify changes
    in rev. 1.1244 (no longer treating 2.4 as a special case).
- Apache access logs will now include username (or username:domain if user's
  domain is not server's default domain) for URLs requiring "valid-user",
- Apache access logs will now include 'public' as requester for image
  files from /res/adm/pages and also domain logos etc.

- Clicking on a "full message" link in an e-mail.  Preserve destination if
  log-in is required.

- convert exisiting cookie reads/validations to use
   lonnet::check_for_valid_session

Put reg exp check for domain logo in lonnet  - &is_domainimage()
checkauthen, publiccheck and lonacc all need this to serve images for log-in page if port 8080 is not in use.
Other possibilities - (1) call once in checkauthen and pass along to publiccheck and lonacc in Apache notes, or (2) modify loncapa_apach.conf.
lonhttpd to use a call to the same routine.

- swithc to using helper cleaing functions and helper matchi re

- sigh

- the $r->intenal_Redirects shortcutting of the login means we might have a loaded env, but no valid cookie, so check both places

- only trigger on the lon-capa case

- allow specifying the fall through authen type

- reverting

Get the sense of the auth_type check right.

- BUG#4807

- switching AuthType from Basic -> LONCAPA  and chanign checkauthen to ignore Basic Auth modes, takes care of bug#4804

- adding authentication checker