Do not use Host header.

Token server can be totally different then resource server.

Do not use Host header.
Token server can be totally different then resource server.
5f46d31b · Łukasz Nowak · Rafael Monnerat · e6afb686 · 5f46d31b · 5f46d31b
Commit 5f46d31b authored May 02, 2012 by Łukasz Nowak Committed by Rafael Monnerat Sep 17, 2012
2 changed files
--- a/bt5/erp5_bearer_token/SkinTemplateItem/portal_skins/erp5_bearer_token/BearerToken_getHMAC.xml
+++ b/bt5/erp5_bearer_token/SkinTemplateItem/portal_skins/erp5_bearer_token/BearerToken_getHMAC.xml
@@ -51,9 +51,8 @@
        <item>
            <key> <string>_body</string> </key>
            <value> <string>return context.Base_getHMAC(key,\n
-  """%s\\n%s\\n%s\\n%s\\n%s""" % (\n
+  """%s\\n%s\\n%s\\n%s""" % (\n
    context.REQUEST.getHeader(\'User-Agent\'),\n
-    context.REQUEST.getHeader(\'Host\'),\n
    context.REQUEST.get(\'REMOTE_ADDR\'),\n
    context.getCreationDate().timeTime(),\n
    fuzzy)\n

--- a/bt5/erp5_bearer_token/bt/revision
+++ b/bt5/erp5_bearer_token/bt/revision
-3
\ No newline at end of file
+4
\ No newline at end of file