docdoku / docdoku-plm

The project purpose is to develop a comprehensive, robust open source PLM (Product LifeCycle Management) solution.
http://www.docdokuplm.com
GNU Affero General Public License v3.0
241 stars 98 forks source link

Admin field in Http response has wrong value when an admin use /account/me [PUT] #1177

Closed ludoBarel closed 6 years ago

ludoBarel commented 6 years ago

when i've done PUT request with ' /account/me ' with an admin account, http response return a json which contain wrong value for admin field.

Execution Traces :

ADMIN AUTHENTICATION

$ curl -i --header "Content-Type: application/json" --request POST -k http://localhost:8080/eplmp-server-rest/api/auth/login --data '{"login":"root","password":"root"}'

HTTP LOGS

HTTP/1.1 200 OK Server: Payara Server 4.1.2.181 #badassfish X-Powered-By: Servlet/3.1 JSP/2.3 (Payara Server 4.1.2.181 #badassfish Java/Oracle Corporation/1.8) Access-Control-Allow-Origin: * Access-Control-Allow-Headers: origin, content-type, accept, authorization, x-accept-encoding, password Access-Control-Expose-Headers: jwt, x-archive-content-length, shared-entity-token, entity-token Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD Set-Cookie: JSESSIONID=369be31c32f617875c7e155f1176; Path=/eplmp-server-rest; HttpOnly jwt: eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ7XCJsb2dpblwiOlwicm9vdFwiLFwiZ3JvdXBOYW1lXCI6XCJhZG1pblwifSIsImlhdCI6MTUzNDE2NTg5MiwiZXhwIjoxNTM0MTc2NjkyfQ.GxX0fJ2zqjPBKMZHG3uQvNJ8BIlXzCLWY8Th4ODd6c4 Content-Type: application/json Date: Mon, 13 Aug 2018 13:11:32 GMT Content-Length: 104 X-Frame-Options: SAMEORIGIN

JSON RESPONSE

{"admin":true,"email":"","enabled":true,"language":"fr","login":"root","name":"master","timeZone":"GMT"}

UPDATE ADMIN ACCOUNT

$ curl -i -X PUT "http://localhost:8080/eplmp-server-rest/api/accounts/me" -H 'accept:application/json' -H 'Content-Type:application/json' -d '{"login": "admin","password": "root","name": "master","email": "","language": "fr","timeZone": "GMT","admin": true,"enabled": true,"newPassword": "root","providerId": 0}' -H 'authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ7XCJsb2dpblwiOlwicm9vdFwiLFwiZ3JvdXBOYW1lXCI6XCJhZG1pblwifSIsImlhdCI6MTUzNDE2NTg5MiwiZXhwIjoxNTM0MTc2NjkyfQ.GxX0fJ2zqjPBKMZHG3uQvNJ8BIlXzCLWY8Th4ODd6c4'

HTTP LOGS

HTTP/1.1 200 OK Server: Payara Server 4.1.2.181 #badassfish X-Powered-By: Servlet/3.1 JSP/2.3 (Payara Server 4.1.2.181 #badassfish Java/Oracle Corporation/1.8) Access-Control-Allow-Origin: * Access-Control-Allow-Headers: origin, content-type, accept, authorization, x-accept-encoding, password Access-Control-Expose-Headers: jwt, x-archive-content-length, shared-entity-token, entity-token Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD Content-Type: application/json Date: Mon, 13 Aug 2018 13:11:46 GMT Content-Length: 105 X-Frame-Options: SAMEORIGIN

JSON RESPONSE

{"admin":false,"email":"","enabled":true,"language":"fr","login":"root","name":"master","timeZone":"GMT"}