Moved a bunch of time functions into UTC. Fixes bugs which we only see for 4 hours...

[rails.git] / app / controllers / application.rb

diff --git a/app/controllers/application.rb b/app/controllers/application.rb
index 579c50e95a725217070beb7532d2880899636c5d..f5ea0063db38b76c7d9cdb74b536b1c8f25cd182 100644 (file)
--- a/app/controllers/application.rb
+++ b/app/controllers/application.rb
@@ -22,7 +22,11 @@ class ApplicationController < ActionController::Base
     redirect_to :controller => 'user', :action => 'login', :referer => request.request_uri unless @user
   end
 
     redirect_to :controller => 'user', :action => 'login', :referer => request.request_uri unless @user
   end
 

-  def authorize(realm='Web Password', errormessage="Couldn't authenticate you") 
+  ##
+  # sets up the @user object for use by other methods. this is mostly called
+  # from the authorize method, but can be called elsewhere if authorisation
+  # is optional.
+  def setup_user_auth

     username, passwd = get_auth_data # parse from headers
     # authenticate per-scheme
     if username.nil?
     username, passwd = get_auth_data # parse from headers
     # authenticate per-scheme
     if username.nil?


@@ -32,6 +36,11 @@ class ApplicationController < ActionController::Base
     else
       @user = User.authenticate(:username => username, :password => passwd) # basic auth
     end
     else
       @user = User.authenticate(:username => username, :password => passwd) # basic auth
     end

+  end
+
+  def authorize(realm='Web Password', errormessage="Couldn't authenticate you") 
+    # make the @user object from any auth sources we have
+    setup_user_auth

 
     # handle authenticate pass/fail
     unless @user
 
     # handle authenticate pass/fail
     unless @user