Skip to content
  1. Aug 08, 2012
  2. Aug 07, 2012
    • Jo-Philipp Wich's avatar
      Rework authentication system · a58370ab
      Jo-Philipp Wich authored
      
      
      The validity of authentication tokens was determined by the
      mtime of respective authentication tokens on filesystem
      stored in $sessionpath.
      Talking about hardware without RTC or without a prior
      connection to a time server, date/time usually around 1970 -
      so is the mtime of the authentication token file in
      $sessionpath.
      
      When now configuring an internet connection via LuCI, the
      system might fetch the current date/time (e.g. via ntp)
      which invalidates the token, returns "403 Forbidden" and
      kicks the user out of the interface.
      
      This patch changes the authentication system to use time values
      based on the uptime of the machine - rather than values based upon
      gettimeofday() and {a|m}time values - and save them inside the token.
      That way can always determine the difference between login
      (last interaction respectively) and the current time, in-
      dependant of the system clock jumping backwards/forwards.
      
      Warning: This patch removes the clean() function and respective calls.
      This means, invalid tokens will NOT be determined and removed from
      filesystem automatically anymore.
      Before, every HTTP-call caused a scan for invalid tokens,
      which is quite expensive. Instead consider using a cron job
      deleting all stalled files periodically.
      
      Contributed by T-Labs, Deutsche Telekom Innovation Laboratories
      
      Signed-off-by: default avatarMirko Vogt <mirko@openwrt.org>
      a58370ab
    • Jo-Philipp Wich's avatar
      return "403 Forbidden" if authentication token was given, however is invalid · 69aa2183
      Jo-Philipp Wich authored
      
      
      Contributed by T-Labs, Deutsche Telekom Innovation Laboratories
      
      Signed-off-by: default avatarMirko Vogt <mirko@openwrt.org>
      69aa2183
  3. Aug 02, 2012
  4. Jul 26, 2012
  5. Jul 24, 2012
  6. Jul 23, 2012
  7. Jul 18, 2012
  8. Jul 15, 2012
  9. Jul 09, 2012
  10. Jul 06, 2012
  11. Jul 05, 2012
  12. Jul 04, 2012
  13. Jul 02, 2012
  14. Jul 01, 2012