OpenProject is the leading open source project management software.

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Oliver Günther 38ecb6b28c [32486] Use error response for unauthenticated instead of warden ... Instead of warden responding with 401 "unauthorized", use our own error response that correctly sets the `WWWW-Authenticat` header. We tripped into the default 401 error that does not output any headers if we're not returning any users. This was caused by another issue: The `session` object may be present, even though no session id exists. Checking `session&.id` instead always yields the anonymous user. This will ensure consumers of APIV3 to always get a JSON / HAL response as well. https://community.openproject.com/wp/32486		5 years ago
..
anonymous_fallback.rb	[32486] Use error response for unauthenticated instead of warden	5 years ago
basic_auth_failure.rb	…
doorkeeper_oauth.rb	…
global_basic_auth.rb	…
session.rb	…
user_basic_auth.rb	…