mahara-contributors team mailing list archive

[Robert Lyon <robertl@xxxxxxxxxxxxxxx>]

It has been decided that webservices in a production site need to be run
over https (SSL) rather than allow some services to be http and others
not.

However one can test webservices by putting their Mahara into non-production mode.
In their config.php file add:

$cfg->productionmode = false;


So will not fix anything for this bug


** Changed in: mahara/16.10
       Status: Triaged => Won't Fix

** Changed in: mahara
       Status: Triaged => Won't Fix

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1470064

Title:
  webservices complain about no HTTPS even for simple user
  authentication

Status in Mahara:
  Won't Fix
Status in Mahara 16.10 series:
  Won't Fix

Bug description:
  Mahara 15.04

  To reproduce...

  - use a site with HTTP (not HTTPS)
  - Create a web service user 
  - configure the user through 'Manage service users' to access any suitable method (e.g. get institution users)
  - use the web services test client with any protocol you like and execute the selected method
  - An error is thrown...

  "exception: Forbidden - HTTPS must be used"

  The documentation (such as it is) indicates that HTTPS is only
  required for token based authentication, not simple username/password

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1470064/+subscriptions