Redfish Session : Fix clientIp getting mapped to clientId
When the session is created using /login, the ClientOriginIPAddress
is mapped to the clientId parameter which displayed the clientIP
instead of the of clientId.
The similar problem is observed with auth methods other than sessions
created using the SessionService resource
This commit swaps the clientId and clientIp parameters passed to
generateUserSession API, so that the optional clientId is
passed as the last parameter
Tested by :
1. Create session using Redfish command
POST https://${bmc}/login -d '{"username": <>,"password": <>}'
POST https://${bmc}/redfish/v1/SessionService/Sessions
-d '{"username": <>,"password": <>}'
2. Open the GUI session to check the clientId is not displaying the
ClientOriginIPAddress
Signed-off-by: Sunitha Harish <sunithaharish04@gmail.com>
Change-Id: I6cee3de963c489e690d2ad0bb09ba78dca39e4f9
diff --git a/include/authorization.hpp b/include/authorization.hpp
index e32d9ad..9e344d8 100644
--- a/include/authorization.hpp
+++ b/include/authorization.hpp
@@ -78,9 +78,10 @@
// needed.
// This whole flow needs to be revisited anyway, as we can't be
// calling directly into pam for every request
+ std::string unsupportedClientId = "";
return persistent_data::SessionStore::getInstance().generateUserSession(
- user, persistent_data::PersistenceType::SINGLE_REQUEST,
- isConfigureSelfOnly, clientIp.to_string());
+ user, clientIp.to_string(), unsupportedClientId,
+ persistent_data::PersistenceType::SINGLE_REQUEST, isConfigureSelfOnly);
}
#endif