Apache
/
archiva
mirror of https://github.com/apache/archiva.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

use POST rather than GET for login to prevent password being in http logs 

git-svn-id: https://svn.apache.org/repos/asf/archiva/trunk@1324830 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Olivier Lamy 2012-04-11 15:59:28 +00:00
parent 1978839d58
commit b1fbb01caa
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
archiva-modules/archiva-web/archiva-webapp-js/src/main/webapp/js/redback/user.js
View File

@ -496,9 +496,6 @@ define("redback.user",["jquery","order!utils","i18n","jquery.validate","order!kn
//#modal-login-footer
$('#modal-login-footer').append(smallSpinnerImg());
var url = 'restServices/redbackServices/loginService/logIn?userName='+$("#user-login-form-username").val();
url += "&password="+$("#user-login-form-password").val();
loginCall($("#user-login-form-username").val(),$("#user-login-form-password").val()
,successLoginCallbackFn,errorLoginCallbackFn,completeLoginCallbackFn);
@ -513,11 +510,14 @@ define("redback.user",["jquery","order!utils","i18n","jquery.validate","order!kn
* @param completeCallbackFn
*/
loginCall=function(username,password,successCallbackFn, errorCallbackFn, completeCallbackFn) {
var url = 'restServices/redbackServices/loginService/logIn?userName='+username;
url += "&password="+password;
var url = 'restServices/redbackServices/loginService/logIn';//?userName='+username;
//url += "&password="+password;
$.ajax({
url: url,
type: 'POST',
contentType: 'application/json',
data: JSON.stringify({username:username,password:password}),
success: successCallbackFn,
error: errorCallbackFn,
complete: completeCallbackFn