Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[WIP] add missing getCsrfTokenManager() to new Request for CryptoWrapper #28921

Closed
wants to merge 1 commit into from

Conversation

phil-davis
Copy link
Contributor

Description

Add the (apparently missing) CsrfTokenManager when doing new Request inside registerService for CryptoWrapper.

Related Issue

#28920

Motivation and Context

Try to track down what causes the "CSRF check failed" issue.

How Has This Been Tested?

Let's see what passes/fails :)

Screenshots (if appropriate):

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

  • My code follows the code style of this project.
  • My change requires a change to the documentation.
  • I have updated the documentation accordingly.
  • I have read the CONTRIBUTING document.
  • I have added tests to cover my changes.
  • All new and existing tests passed.

@phil-davis phil-davis self-assigned this Sep 6, 2017
@phil-davis
Copy link
Contributor Author

History:
#18482 added CryptoWrapper stuff 2015-08-24
#21894 added CSRF manager stuff 2016-01-26
that added a getCsrfTokenManager to a new Request call at https://github.com/owncloud/core/pull/21894/files#diff-4bebfeb572bb49e9d3fc4c1c480813d0R498
But it did not add it to the new Request call further down for CryptoWrapper.

So that is what I have done here.

@phil-davis
Copy link
Contributor Author

At https://github.com/owncloud/core/blob/master/lib/private/AppFramework/Http/Request.php#L454
not having a csrfTokenManager is one way to fail passesCSRFCheck()

So maybe there is some way the change here will help???

@phil-davis
Copy link
Contributor Author

This breaks stuff.

@phil-davis phil-davis changed the title add missing getCsrfTokenManager() to new Request for CryptoWrapper [WIP] add missing getCsrfTokenManager() to new Request for CryptoWrapper Sep 7, 2017
@PVince81 PVince81 modified the milestones: 10.0.3, development Sep 18, 2017
@phil-davis
Copy link
Contributor Author

This is not helpful.

@phil-davis phil-davis closed this Oct 1, 2017
@phil-davis phil-davis deleted the csrf-check-failed branch October 1, 2017 14:50
@lock
Copy link

lock bot commented Aug 2, 2019

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@lock lock bot locked as resolved and limited conversation to collaborators Aug 2, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants