Browse Source

fix full page health auth error

jrivard@gmail.com 6 năm trước cách đây
mục cha
commit
c1edaecc3e

+ 15 - 13
server/src/main/java/password/pwm/http/servlet/ClientApiServlet.java

@@ -213,21 +213,23 @@ public class ClientApiServlet extends ControlledPwmServlet
     {
         if ( pwmRequest.getPwmApplication().getApplicationMode() == PwmApplicationMode.RUNNING )
         {
-
-            if ( !pwmRequest.isAuthenticated() )
+            if ( !pwmRequest.getConfig().readSettingAsBoolean( PwmSetting.PUBLIC_HEALTH_STATS_WEBSERVICES ) )
             {
-                final ErrorInformation errorInformation = new ErrorInformation( PwmError.ERROR_AUTHENTICATION_REQUIRED );
-                LOGGER.debug( pwmRequest, errorInformation );
-                pwmRequest.respondWithError( errorInformation );
-                return ProcessStatus.Halt;
-            }
+                if ( !pwmRequest.isAuthenticated() )
+                {
+                    final ErrorInformation errorInformation = new ErrorInformation( PwmError.ERROR_AUTHENTICATION_REQUIRED );
+                    LOGGER.debug( pwmRequest, errorInformation );
+                    pwmRequest.respondWithError( errorInformation );
+                    return ProcessStatus.Halt;
+                }
 
-            if ( !pwmRequest.getPwmSession().getSessionManager().checkPermission( pwmRequest.getPwmApplication(), Permission.PWMADMIN ) )
-            {
-                final ErrorInformation errorInformation = new ErrorInformation( PwmError.ERROR_UNAUTHORIZED, "admin privileges required" );
-                LOGGER.debug( pwmRequest, errorInformation );
-                pwmRequest.respondWithError( errorInformation );
-                return ProcessStatus.Halt;
+                if ( !pwmRequest.getPwmSession().getSessionManager().checkPermission( pwmRequest.getPwmApplication(), Permission.PWMADMIN ) )
+                {
+                    final ErrorInformation errorInformation = new ErrorInformation( PwmError.ERROR_UNAUTHORIZED, "admin privileges required" );
+                    LOGGER.debug( pwmRequest, errorInformation );
+                    pwmRequest.respondWithError( errorInformation );
+                    return ProcessStatus.Halt;
+                }
             }
         }