From eb02247a58e9f8be97a7cc679081ac7e70decade Mon Sep 17 00:00:00 2001 From: Jarrod Johnson Date: Mon, 7 Nov 2016 10:18:32 -0500 Subject: [PATCH] Fix consistency of sessionid Regardless of whether the client uses it as a session id or not, the fact remains a sessionid is assigned. Pass the session id in the auth data even if the client did not send it. --- confluent_server/confluent/httpapi.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/confluent_server/confluent/httpapi.py b/confluent_server/confluent/httpapi.py index a65483e8..920aa2fa 100644 --- a/confluent_server/confluent/httpapi.py +++ b/confluent_server/confluent/httpapi.py @@ -306,8 +306,8 @@ def _authorize_request(env, operation): auditmsg['tenant'] = authdata[3] authinfo['tenant'] = authdata[3] auditmsg['user'] = authdata[2] - if sessionid is not None: - authinfo['sessionid'] = sessionid + if sessid is not None: + authinfo['sessionid'] = sessid if not skiplog: auditlog.log(auditmsg) if 'csrftoken' in httpsessions[sessid]: