From a79ab9ed186112056d7f60e41e8d0760c2cc13f5 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Fri, 5 Jan 2018 11:40:18 -0400 Subject: add and use cgiurl_abs_samescheme * emailauth: Fix cookie problem when user is on https and the cgiurl uses http, by making the emailed login link use https. * passwordauth: Use https for emailed password reset link when user is on https. Not entirely happy with this approach, but I don't currently see a better one. I have not verified that the passwordauth change fixes any problem, other than the user getting a http link when they were using https. The emailauth problem is verified fixed by this commit. This commit was sponsored by Michael Magin. --- debian/changelog | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'debian') diff --git a/debian/changelog b/debian/changelog index 63e5f61d6..6cf509f9d 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,5 +1,9 @@ ikiwiki (3.20171002) UNRELEASED; urgency=medium + * emailauth: Fix cookie problem when user is on https and the cgiurl + uses http, by making the emailed login link use https. + * passwordauth: Use https for emailed password reset link when user + is on https. * Updated German basewiki and directives translation from Sebastian Kuhnert. -- cgit v1.2.3