search

iot-lab / testbed-webportal

Testbed webportal code
1 stars 3 forks source link

mixup with username/email #84

Open rienafairefr opened 5 years ago

rienafairefr commented 5 years ago

Seen at the tutorial at station F today:

I think the problem comes from the auth.username field (stored in the browser in LocalStorage), which contains the email when the user logged in with the email/password combination. But in the experiment details view, the experiment.user field is not the email :-)

rienafairefr commented 5 years ago

Reproduced, and diagnostic confirmed. On devwww.iot-lab.info, when logging in with email, then some functionalities don't work (experiment details at least). With #85 deployed the problem goes away :+1:

vandaele commented 5 years ago

Thx for having found the origin and a fix so quickly. So, why a user authenticated with his email could see experimentations anyway ?

rienafairefr commented 5 years ago

the JS web-app sends (username/email, password) on each request, in testbed-manager the LDAP verifier can handle either (username, password) (email, password) to authorize a certain request response :-)