#2
  • Created on
    2005-03-06 22:11
  • Reported by
    bsag
  • Status
    Fixed
  • Priority
    Normal (3)
  • Assigned to
    bsag
  • Milestone
    -
  • Plan Level
    -
  • Due Date
    -

Attachments

Related Tickets

Add new subtask or bug

Feed authentication

Add some kind of authentication to text and RSS feeds so that they are not publicly accessible.
User picture
  on 2005-03-06 22:11 *
By bsag
Status changed from New to Accepted
Status changed from New to Accepted
User picture
  on 2005-03-06 22:17 *
By bsag
Status changed from Accepted to Fixed
Status changed from Accepted to Fixed
This is fixed in changeset:30. There's a new field in the users table which accepts a secret word. This is encoded using MD5, and this encoded token -- along with your username -- is used to form the URL for both text and RSS feeds. Anyone using the plain URL without the correct username and token gets a message that they are not permitted to view the feed.