It has been decided that webservices in a production site need to be run
over https (SSL) rather than allow some services to be http and others
not.
However one can test webservices by putting their Mahara into non-production
mode.
In their config.php file add:
$cfg->productionmode = false;
So will not fix anything for this bug
** Changed in: mahara/16.10
Status: Triaged => Won't Fix
** Changed in: mahara
Status: Triaged => Won't Fix
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1470064
Title:
webservices complain about no HTTPS even for simple user
authentication
Status in Mahara:
Won't Fix
Status in Mahara 16.10 series:
Won't Fix
Bug description:
Mahara 15.04
To reproduce...
- use a site with HTTP (not HTTPS)
- Create a web service user
- configure the user through 'Manage service users' to access any suitable
method (e.g. get institution users)
- use the web services test client with any protocol you like and execute the
selected method
- An error is thrown...
"exception: Forbidden - HTTPS must be used"
The documentation (such as it is) indicates that HTTPS is only
required for token based authentication, not simple username/password
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1470064/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to : [email protected]
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp