| # |
Jul 8th 2019, 15:03 |
 neon1024 |
Sounds sensible to me |
| # |
Jul 8th 2019, 15:03 |
neon1024 |
Oh, wait, that would be Post to Get |
| # |
Jul 8th 2019, 15:03 |
neon1024 |
Ensure you are not using the PRG pattern anywhere |
| # |
Jul 8th 2019, 14:44 |
em. |
Should i open an issue? |
| # |
Jul 8th 2019, 14:40 |
em. |
CakePHP Http client converts a GET request into a POST request if the body is set.. It’s an unusual use case. But still strange behavior. |
| # |
Jul 8th 2019, 14:03 |
martin |
Need to check if I can use the new middleware for that, so it is also future-proof :P |
| # |
Jul 8th 2019, 14:00 |
martin |
did use https://github.com/uafrica/oauth-server in the past, but not maintained anymore |
| # |
Jul 8th 2019, 14:00 |
jeremyharris |
that I know nothing about, sorry |
| # |
Jul 8th 2019, 14:00 |
jeremyharris |
oh |
| # |
Jul 8th 2019, 14:00 |
martin |
but that pull request is login in with oauth by other provider. I want to run an oauth server |
| # |
Jul 8th 2019, 13:59 |
jeremyharris |
I don’t know the full history behind why it was abandoned (and haven’t looked at the code), you might be able to re-open the discussion with @cleptric and help solve some of the problems they had in order to get it in the library. I’m sure a lot of people would appreciate an oauth2 authenticator built in |
| # |
Jul 8th 2019, 13:58 |
martin |
Hmm, I don’t think that they will add it to the authentication plugin by it self? |
| # |
Jul 8th 2019, 13:57 |
jeremyharris |
you might be able to use some of this work: https://github.com/cakephp/authentication/pull/110 it was closed because the implementation wasn’t up to standards |
| # |
Jul 8th 2019, 13:56 |
martin |
Yes that is true |
| # |
Jul 8th 2019, 13:56 |
jeremyharris |
isn’t it both? it’s been a while since I’ve worked with it, but it authenticates and authorizes (via scope) right? either way, the libs should work with it |
| # |
Jul 8th 2019, 13:54 |
martin |
I did somewhere that is is not added by default because oauth2 is not authentication |
| # |
Jul 8th 2019, 13:54 |
martin |
better than build it in the old auth component :P |
| # |
Jul 8th 2019, 13:52 |
jeremyharris |
that would be in the authentication component, but yes it should be possible |
| # |
Jul 8th 2019, 13:50 |
martin |
middleware |
| # |
Jul 8th 2019, 13:50 |
martin |
ehh |
| # |
Jul 8th 2019, 13:50 |
martin |
wanted to know if it was possible to build in inside the authorization component |
| # |
Jul 8th 2019, 13:50 |
martin |
For a new (api) project I was yesterday checking for oauth2, since the only plugin that adds it is not maintained |
| # |
Jul 8th 2019, 13:50 |
jeremyharris |
I have an app that, when the user views a QuoteRequest, it checks if they are in certain groups or have been personally shared that quote request from a someone who has sendable permissions |
| # |
Jul 8th 2019, 13:49 |
jeremyharris |
as powerful as complex ACLs or as simple as RBAC |
| # |
Jul 8th 2019, 13:49 |
jeremyharris |
it’s flexible enough to support just about anything you want |
| # |
Jul 8th 2019, 13:49 |
martin |
That is something I’m missing right now |
| # |
Jul 8th 2019, 13:48 |
martin |
It also checks if a user is allowed to read the entity? |
| # |
Jul 8th 2019, 13:48 |
martin |
Yes I was checking that yesterday |
| # |
Jul 8th 2019, 13:48 |
jeremyharris |
yeah not to worry, it’s not going to be an overnight change :) it’s worth it though, the authorization lib is really nice |
| # |
Jul 8th 2019, 13:47 |
martin |
Then I have enough time to convert it :P |
| # |
Jul 8th 2019, 13:45 |
jeremyharris |
that’s how I read it |
| # |
Jul 8th 2019, 13:45 |
neon1024 |
Then it’ll not be included in 5.0 |
| # |
Jul 8th 2019, 13:44 |
neon1024 |
So the release of 4.0 will see it marked deprecated right? |
| # |
Jul 8th 2019, 13:44 |
neon1024 |
I find this wording confusing `Deprecated since version 4.0.0` |
| # |
Jul 8th 2019, 13:32 |
jeremyharris |
yes it’ll work in 4.0.0 |
| # |
Jul 8th 2019, 13:32 |
martin |
so it will still work in version 4.0.0 :P |
| # |
Jul 8th 2019, 13:32 |
martin |
“Deprecated since version 4.0.0: The AuthComponent is deprecated as of 4.0.0 and will be replaced by the authorization and authentication plugins.” |
| # |
Jul 8th 2019, 13:31 |
martin |
oh it is on the page |
| # |
Jul 8th 2019, 13:29 |
martin |
What is the future of the auth component? will this replaced with the middleware version or does the current way also work in cake 4? |
| # |
Jul 8th 2019, 12:50 |
dereuromark |
wow, that sounds like a strange bug then. I would expect this only if something failed and we dont revert properly, or so |
| # |
Jul 8th 2019, 12:40 |
half2me |
@dereuromark nope, no exceptions. When I turn of atomicity, everything works as expected |