Replies: 1 comment 12 replies
-
|
Check your browser / developer console and also check the network tab. |
Beta Was this translation helpful? Give feedback.
-
I guess it should be fairly easy for someone with javascript knowledge. |
Beta Was this translation helpful? Give feedback.
-
|
I know HTTP-AUTH is open for brute force attacks, but coupled with fail2ban it does make for a pretty good first layer of protection for apps that you may not want exposed on the Internet. So that's how we do it. What I meant was that the PHP code could pick up these headers (if they're set) when you log in to Kimai, and then simply pass them on whenever you make an ajax call to fetch stuff via the API. |
Beta Was this translation helpful? Give feedback.
-
|
@kevinpapst Are all API calls dispatched from a central place in the code, or are there multiple places (javascript) where these are made? |
Beta Was this translation helpful? Give feedback.
-
|
Had a quick look, most should happen in these two places: |
Beta Was this translation helpful? Give feedback.
-
|
I wonder if it's possible to do this with Apache/Nginx configuration directives somehow ... 🤔 |
Beta Was this translation helpful? Give feedback.
-
What would be a "normal" reason for the modal popping up with Missing permission. Redirect to login?
This is with 2.0.14, and I can get it in all sorts of places. Just now I got when I clicked on "Time Tracking > Calendar". The calendar is displayed behind the modal. I find no errors in any log file.
If I click Confirm in the modal dialog box, nothing happens. Or rather, I'm re-directed to the previous page I was on.
The only thing I can see in the nginx access log is a 403 for an API call:
"GET /api/timesheets?user=4&size=1000&full=true&begin=2024-04-01T00:00:00&end=2024-05-13T00:00:00 HTTP/2.0" 403Can't figure this one out 🤔
Beta Was this translation helpful? Give feedback.
All reactions