Bakery currently conflicts with Basic Authorization methods of access with no recourse (currently). Because Bakery's cookie structure jumps in at hook_boot this requires other projects to (theoretically) preempt it and do their user login processes in hook_boot and make them happen earlier. This is by design for security as and simplicity; bakery wants to be the authority as far as logging people in securely from 1 place (basically).

This is great, until you want users to utilize your network of applications / systems in a SSO manner but also want data passed around that requires web services to login and perform tasks. Bakery will see an anonymous user and kick over to the login form.

The patch here will provide support for basically applying the "bypass sso" permission for any account that can login via Basic Authorization headers. This means people can login (and by people I mean web systems) via passing credentials to a site. This would allow robots and humans to play nicely with this great cross-domain SSO project without constantly baking cookies and blocking connection :).

It's pretty simple, mostly comments as to why you'd want to do this. This is rolled against 2.x

CommentFileSizeAuthor
#2 bakery-allow-basic-auth-skip-sso-2653554-1.patch3.51 KBbtopro
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

btopro created an issue. See original summary.

btopro’s picture

btopro CreditAttribution: btopro at Pennsylvania State University for ELMSLN commented
Status: Active » Needs review
FileSize
bakery-allow-basic-auth-skip-sso-2653554-1.patch3.51 KB

here's the patch we are looking to use in elmsln

drupov’s picture

drupov CreditAttribution: drupov commented
Status: Needs review » Needs work

Hi,

there are several issues with the patch:

It's not created relative to the modules' root:

diff --git a/core/dslmcode/shared/drupal-7.x/modules/ulmus/bakery/bakery.module b/core/dslmcode/shared/drupal-7.x/modules/ulmus/bakery/bakery.module
index 8640390..0b957c6 100644
--- a/core/dslmcode/shared/drupal-7.x/modules/ulmus/bakery/bakery.module
+++ b/core/dslmcode/shared/drupal-7.x/modules/ulmus/bakery/bakery.module

Also there is not hook_form_alter implementation in 7.x-2.x and also not in the current stable branch, so hunk #2 fails.

Hunks #1 and #3 have rather big offsets:

patching file bakery.module
Hunk #1 succeeded at 242 (offset 26 lines).
Hunk #2 FAILED at 323.
Hunk #3 succeeded at 2009 (offset 137 lines).
1 out of 3 hunks FAILED -- saving rejects to file bakery.module.rej

Can you please take a look again?