passiomatic / coldsweat

Web RSS aggregator and reader compatible with the Fever API
MIT License
145 stars 21 forks source link

API key check is case-sensitive #51

Closed tewe closed 10 years ago

tewe commented 10 years ago

User.make_api_key returns lower-case hex digits, the popular Mr. Reader client offers upper-case, so login fails

passiomatic commented 10 years ago

I see. I was looking at the Fever API demo widget when I wrote that validation code and it outputs lowercase letters. I will normalize to lowercase the API key before check against the existing ones.

passiomatic commented 10 years ago

Did you manage to run Mr. Reader with Coldsweat? I've patched the API key validation code as described - you can find it in the 0.92 WIP branch.

tewe commented 10 years ago

Yes. I had just changed the key in the database, but now I tried your patch as well.