Details
-
Improvement
-
Resolution: Fixed
-
Minor
-
4.5.3, 5.0
-
None
-
Unknown
-
N/A
-
Pull Request accepted
-
Description
When we make REST calls and pass authentication to it (in form of a cookie for instance), we won't receive an error of the authentication has been lost. Instead the rest api will response as if it was a guest request. This does not allow client applications to verify if the user is still properly connected.
To fix this I propose to add response headers to pass the user finally authenticated in the header "XWiki-User"
At the same time we can pass the "XWiki-Version" header which could also be usefull to make version specific treatments to the data. Currently you would have to do an additional request to know the XWiki version.
This are usefull changes for the Mobile client.