Openbravo Issue Tracking System - Retail Modules
View Issue Details
0033140Retail ModulesWeb POSpublic2016-06-05 23:452016-06-14 11:41
mtaal 
mtaal 
normalminorhave not tried
closedfixed 
5
 
RR16Q3 
AugustoMauch
No
0033140: Multi-server authentication: prevent using the authentication token approach in the system client and user
The multi-server authentication approach should normally only be used within a retail-store organization and not in client zero/org zero user.

Therefore it is best to explicitly preventing creating tokens for client zero by throwing an explicit exception.
Use defensive coding to prevent creating a token for client zero.
No tags attached.
Issue History
2016-06-05 23:45mtaalNew Issue
2016-06-05 23:45mtaalAssigned To => mtaal
2016-06-05 23:45mtaalTriggers an Emergency Pack => No
2016-06-06 08:51hgbotCheckin
2016-06-06 08:51hgbotNote Added: 0087013
2016-06-06 08:51hgbotStatusnew => resolved
2016-06-06 08:51hgbotResolutionopen => fixed
2016-06-06 08:51hgbotFixed in SCM revision => http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/f90fa1f97a2f98038c971ca05da19aa0afbbab34 [^]
2016-06-13 16:51mtaalReview Assigned To => AugustoMauch
2016-06-14 11:41AugustoMauchNote Added: 0087242
2016-06-14 11:41AugustoMauchStatusresolved => closed

Notes
(0087013)
hgbot   
2016-06-06 08:51   
Repository: erp/pmods/org.openbravo.mobile.core
Changeset: f90fa1f97a2f98038c971ca05da19aa0afbbab34
Author: Martin Taal <martin.taal <at> openbravo.com>
Date: Mon Jun 06 08:41:11 2016 +0200
URL: http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/f90fa1f97a2f98038c971ca05da19aa0afbbab34 [^]

Fixes issue 33140: Multi-server authentication: prevent using the authentication token approach in the system client and user
Defensive coding, throw exception for not supported case

---
M src/org/openbravo/mobile/core/authenticate/MobileAuthenticationKeyUtils.java
---
(0087242)
AugustoMauch   
2016-06-14 11:41   
Code reviewed and verified in [1]@f90fa1f97a2f

[1] https://code.openbravo.com/erp/pmods/org.openbravo.mobile.core [^]