Handbuch:$wgRestAllowCrossOriginCookieAuth

This page is a translated version of the page Manual:$wgRestAllowCrossOriginCookieAuth and the translation is 33% complete.
Sicherheit: $wgRestAllowCrossOriginCookieAuth
Allows authenticated cross-origin requests to the REST API with session cookies.
Eingeführt in Version:1.36.0 (Gerrit change 621900; git #c36b3204)
Entfernt in Version:weiterhin vorhanden
Erlaubte Werte:(boolean)
Standardwert:false

Details

Allows authenticated cross-origin requests to the REST API with session cookies.

With this option enabled, any origin specified in $wgCrossSiteAJAXdomains may send session cookies for authorization in the REST API.

There is a performance impact by enabling this option. Therefore, it should be left disabled for most wikis and clients should instead use OAuth to make cross-origin authenticated requests.

Siehe auch