[PATCH] bugzilla: support Bugzilla 4.4.3+ API login token authentication (issue4257)

Matt Mackall mpm at selenic.com
Mon May 26 19:00:12 CDT 2014


On Mon, 2014-05-26 at 12:13 -0400, Augie Fackler wrote:
> On Fri, May 23, 2014 at 05:42:51PM +0100, Jim Hague wrote:
> > # HG changeset patch
> > # User Jim Hague <jim.hague at acm.org>
> > # Date 1400862544 -3600
> > #      Fri May 23 17:29:04 2014 +0100
> > # Branch stable
> > # Node ID 1522f121693156c814fd1d037c3dbc57a3639030
> > # Parent  54d7657d7d1e6a62315eea53f4498657e766bb60
> > bugzilla: support Bugzilla 4.4.3+ API login token authentication (issue4257)
> 
> Looks reasonable, queued for stable. Thanks!
> 
> >
> > Bugzilla 4.4.3 and later remove the old cookie based session authentication
> > from the Web Services API and replace it with a login token. The session
> > can now also be restricted to the originating IP.
> >
> > Add the necessary to the extension so it works with 4.4.3 and later.

Technically, this is a regression for Bugzilla (we broke all our
clients!) but a feature for us (we added 4.4.3 support!). So it's not
100% appropriate for OUR stable branch..

Are we sure this is safe against older Bugzilla?

-- 
Mathematics is the supreme nostalgia of our time.




More information about the Mercurial-devel mailing list