X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/e5de95c8d7040a2810238e069dd18403765ce056..b612ef0640ea45f03ad43ed4b124be1034d21071:/services/api/app/middlewares/arvados_api_token.rb diff --git a/services/api/app/middlewares/arvados_api_token.rb b/services/api/app/middlewares/arvados_api_token.rb index 4098fd72ca..acdc485811 100644 --- a/services/api/app/middlewares/arvados_api_token.rb +++ b/services/api/app/middlewares/arvados_api_token.rb @@ -39,6 +39,7 @@ class ArvadosApiToken # Set current_user etc. based on the primary session token if a # valid one is present. Otherwise, use the first valid token in # reader_tokens. + accepted = false auth = nil [params["api_token"], params["oauth_token"], @@ -50,6 +51,7 @@ class ArvadosApiToken validate(token: supplied, remote: remote) if try_auth.andand.user auth = try_auth + accepted = supplied break end end @@ -58,6 +60,7 @@ class ArvadosApiToken Thread.current[:api_client_authorization] = auth Thread.current[:api_client_uuid] = auth.andand.api_client.andand.uuid Thread.current[:api_client] = auth.andand.api_client + Thread.current[:token] = accepted Thread.current[:user] = auth.andand.user @app.call env if @app