{"action":"created","issue":{"url":"https://api.github.com/repos/wikimedia/restbase/issues/272","labels_url":"https://api.github.com/repos/wikimedia/restbase/issues/272/labels{/name}","comments_url":"https://api.github.com/repos/wikimedia/restbase/issues/272/comments","events_url":"https://api.github.com/repos/wikimedia/restbase/issues/272/events","html_url":"https://github.com/wikimedia/restbase/pull/272","id":92602178,"number":272,"title":"Added cookie forwarding (T88016)","user":{"login":"Pchelolo","id":814754,"avatar_url":"https://avatars.githubusercontent.com/u/814754?v=3","gravatar_id":"","url":"https://api.github.com/users/Pchelolo","html_url":"https://github.com/Pchelolo","followers_url":"https://api.github.com/users/Pchelolo/followers","following_url":"https://api.github.com/users/Pchelolo/following{/other_user}","gists_url":"https://api.github.com/users/Pchelolo/gists{/gist_id}","starred_url":"https://api.github.com/users/Pchelolo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Pchelolo/subscriptions","organizations_url":"https://api.github.com/users/Pchelolo/orgs","repos_url":"https://api.github.com/users/Pchelolo/repos","events_url":"https://api.github.com/users/Pchelolo/events{/privacy}","received_events_url":"https://api.github.com/users/Pchelolo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-07-02T10:12:13Z","updated_at":"2015-08-10T17:22:04Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/wikimedia/restbase/pulls/272","html_url":"https://github.com/wikimedia/restbase/pull/272","diff_url":"https://github.com/wikimedia/restbase/pull/272.diff","patch_url":"https://github.com/wikimedia/restbase/pull/272.patch"},"body":"Cookies set on original request are forwarded to parsoid and mediawiki endpoints to let user auth and read content.\r\n\r\nTwo tests added, verifying that cookies are actually forwarded - one for parsoid and one for mediawiki api.\r\n\r\nThis solves only a part of the problem, after this fix user can read content from private wiki, but we still do not have a mechanism to forbid read of content already stored in restbase.\r\n\r\nAdded simple authentication module which checks permissions for content stored in restbase. Permissions are specified in the spec, and then collected along the path. On request, permission are checked with mediawiki api and 401 is returned in case user lacks any rights.\r\n\r\nBug: https://phabricator.wikimedia.org/T88016"},"comment":{"url":"https://api.github.com/repos/wikimedia/restbase/issues/comments/129534433","html_url":"https://github.com/wikimedia/restbase/pull/272#issuecomment-129534433","issue_url":"https://api.github.com/repos/wikimedia/restbase/issues/272","id":129534433,"user":{"login":"Pchelolo","id":814754,"avatar_url":"https://avatars.githubusercontent.com/u/814754?v=3","gravatar_id":"","url":"https://api.github.com/users/Pchelolo","html_url":"https://github.com/Pchelolo","followers_url":"https://api.github.com/users/Pchelolo/followers","following_url":"https://api.github.com/users/Pchelolo/following{/other_user}","gists_url":"https://api.github.com/users/Pchelolo/gists{/gist_id}","starred_url":"https://api.github.com/users/Pchelolo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Pchelolo/subscriptions","organizations_url":"https://api.github.com/users/Pchelolo/orgs","repos_url":"https://api.github.com/users/Pchelolo/repos","events_url":"https://api.github.com/users/Pchelolo/events{/privacy}","received_events_url":"https://api.github.com/users/Pchelolo/received_events","type":"User","site_admin":false},"created_at":"2015-08-10T17:22:04Z","updated_at":"2015-08-10T17:22:04Z","body":"@gwicke yes, there's some stuff I wanted to change, will work on this tomorrow most likely"}}