From 867d44a9335e3e6de357be5e0f0245dada0ee80a Mon Sep 17 00:00:00 2001 From: Alon Levy Date: Thu, 30 Apr 2015 22:29:40 +0300 Subject: server/rz_api: allow wrong session data, just ignore for now. added FIXME to remove cookie --- src/server/rz_api.py | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) (limited to 'src/server') diff --git a/src/server/rz_api.py b/src/server/rz_api.py index 223c494a..fbd71e8c 100644 --- a/src/server/rz_api.py +++ b/src/server/rz_api.py @@ -33,13 +33,14 @@ def rz_mainpage(rzdoc_name=None): if None != email_address: # session cookie passed & contains uid (email_address) try: _uid, u_account = current_app.user_db.lookup_user__by_email_address(email_address) - role_set = u_account.role_set - rz_username = escape(u_account.rz_username) except Exception as e: # may occur on user_db reset or malicious cookie != stale cookie, # for which the user would at least be known to the user_db - log.exception(e) - return common_resp_handle__client_error() + # FIXME: remove the cookie + pass + else: + role_set = u_account.role_set + rz_username = escape(u_account.rz_username) if None == rzdoc_name: s_rzdoc_name = current_app.rz_config.rzdoc__mainpage_name -- cgit v1.3.1