From 305206885e132d4e168452e18ac890932343ddf1 Mon Sep 17 00:00:00 2001 From: Tony Mack Date: Thu, 15 Oct 2009 15:18:01 +0000 Subject: [PATCH] authenticate request_hash using client gid from the cred --- sfa/methods/register.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/sfa/methods/register.py b/sfa/methods/register.py index b266a649..36680d0d 100644 --- a/sfa/methods/register.py +++ b/sfa/methods/register.py @@ -38,7 +38,12 @@ class register(Method): returns = Parameter(int, "String representation of gid object") def call(self, cred, record_dict, request_hash, caller_cred=None): - self.api.auth.authenticateCred(cred, [cred, record_dict], request_hash) + # This cred will be an authority cred, not a user, so we cant use it to + # authenticate the caller's request_hash. Let just get the caller's gid + # from the cred and authenticate using that + client_gid = Credential(string=cred).get_gid_caller() + client_gid_str = client_gid.save_to_string() + self.api.auth.authenticateGid(cred, [cred, record_dict], request_hash) self.api.auth.check(cred, "register") if caller_cred==None: caller_cred=cred -- 2.47.0