Openbravo Issue Tracking System - Retail Modules |
| View Issue Details |
|
| ID | Project | Category | View Status | Date Submitted | Last Update |
| 0045962 | Retail Modules | Web POS | public | 2021-02-26 13:14 | 2021-03-02 08:47 |
|
| Reporter | migueldejuana | |
| Assigned To | prakashmurugesan88 | |
| Priority | immediate | Severity | critical | Reproducibility | always |
| Status | closed | Resolution | fixed | |
| Platform | | OS | 5 | OS Version | |
| Product Version | pi | |
| Target Version | RR20Q4.2 | Fixed in Version | RR20Q4.3 | |
| Merge Request Status | approved |
| Review Assigned To | |
| OBNetwork customer | No |
| Support ticket | |
| Regression level | |
| Regression date | |
| Regression introduced in release | |
| Regression introduced by commit | |
| Triggers an Emergency Pack | No |
|
| Summary | 0045962: We are sending credentials using GET |
| Description | The request used by Terminal Authentication is using GET method and we are setting credentials in the params.
For security reasons, we must use POST in this case. |
| Steps To Reproduce | n/a |
| Proposed Solution | This component:
enyo.kind({
kind: 'enyo.Ajax',
name: 'OB.OBPOSLogin.UI.LoginRequest',
classes: 'obObposLoginUiLoginRequest',
url: '../../org.openbravo.retail.posterminal.service.loginutils',
method: 'GET',
handleAs: 'json',
contentType: 'application/json;charset=utf-8'
});
must use POST and we should handle it properly in MobileCoreLoginUtilsServlet |
| Additional Information | |
| Tags | No tags attached. |
| Relationships | |
| Attached Files | |
|
| Issue History |
| Date Modified | Username | Field | Change |
| 2021-02-26 13:15 | migueldejuana | Type | defect => backport |
| 2021-02-26 13:15 | migueldejuana | Target Version | => RR20Q4.2 |
| 2021-03-02 08:06 | hgbot | Merge Request Status | => open |
| 2021-03-02 08:06 | hgbot | Note Added: 0126446 | |
| 2021-03-02 08:07 | hgbot | Note Added: 0126447 | |
| 2021-03-02 08:27 | hgbot | Merge Request Status | open => approved |
| 2021-03-02 08:45 | hgbot | Resolution | open => fixed |
| 2021-03-02 08:45 | hgbot | Status | scheduled => closed |
| 2021-03-02 08:45 | hgbot | Note Added: 0126458 | |
| 2021-03-02 08:45 | hgbot | Fixed in Version | => RR20Q4.3 |
| 2021-03-02 08:45 | hgbot | Note Added: 0126459 | |
| 2021-03-02 08:47 | hgbot | Note Added: 0126460 | |
| 2021-03-02 08:47 | hgbot | Note Added: 0126461 | |
|
Notes |
|
|
(0126446)
|
|
hgbot
|
|
2021-03-02 08:06
|
|
|
|
|
(0126447)
|
|
hgbot
|
|
2021-03-02 08:07
|
|
|
|
|
(0126458)
|
|
hgbot
|
|
2021-03-02 08:45
|
|
|
|
|
(0126459)
|
|
hgbot
|
|
2021-03-02 08:45
|
|
|
|
|
(0126460)
|
|
hgbot
|
|
2021-03-02 08:47
|
|
|
|
|
(0126461)
|
|
hgbot
|
|
2021-03-02 08:47
|
|
|