owncloud / product

ownCloud Product Backlog
GNU Lesser General Public License v3.0
0 stars 1 forks source link

[OCIS] cloud/users endpoints dont need any authentication #248

Open dpakach opened 4 years ago

dpakach commented 4 years ago
❯ curl -X GET https://localhost:9200/ocs/v1.php/cloud/users/michael -ks | xmllint --format -
<?xml version="1.0" encoding="UTF-8"?>
<ocs>
  <meta>
    <status>ok</status>
    <statuscode>100</statuscode>
    <message>OK</message>
  </meta>
  <data>
    <enabled>true</enabled>
    <id>michael</id>
    <username>michael</username>
    <display-name>display name</display-name>
    <displayname>display name</displayname>
    <email>michael@email.com</email>
    <quota>
      <free>2840756224000</free>
      <used>5059416668</used>
      <total>2845815640668</total>
      <relative>0.18</relative>
      <definition>default</definition>
    </quota>
    <uidnumber>0</uidnumber>
    <gidnumber>0</gidnumber>
  </data>
</ocs>
sushmita56 commented 2 years ago

Current oCIS has expected response

  1. Trying to get user information without authentication:
    
    curl -X GET https://localhost:9200/ocs/v1.php/cloud/users/demo -ks | xmllint --format - 

<?xml version="1.0" encoding="UTF-8"?>

error 997 Unauthorized
2. Trying to list users by normal user:

curl -X GET https://localhost:9200/ocs/v1.php/cloud/users -ks -udemo:demo | xmllint --format - <?xml version="1.0" encoding="UTF-8"?>

error 997 Unauthorized

Todo: 
- [ ] Fixed the tests related to this issue