Closed (fixed)
Project:
Token authentication
Version:
6.x-1.x-dev
Component:
Code
Priority:
Normal
Category:
Feature request
Assigned:
Unassigned
Reporter:
Created:
25 Jun 2011 at 05:46 UTC
Updated:
28 Dec 2012 at 23:40 UTC
'token' is a heavily impacted variable name, often used in security mechanisms. The default of token is probably okay, but it should be configurable.
My intent is to replace all references to $_REQUEST['token'] with a function call along these lines:
function tokenauth_url_token() {
return $_REQUEST[variable_get('tokenauth_query_string', 'token')];
}
UI would be nice, but non-essential.
Comments
Comment #1
Grayside commentedThere are many places in the code that need the key itself, and few places that need to touch the $_REQUEST variable.
Conflicts with devel user switch and other fun problems have impelled me to deal with this now, though without a UI.
http://drupalcode.org/project/tokenauth.git/commit/c71565b
Comment #2
Grayside commentedComment #3
Grayside commented