Header Authorize creates alterations of the Login System to accept Header information for authorization. This allows you to use a central authentication system for multiple applications.
An authenticate_with_header
method is added as a before_filter on the ApplicationController. authenticate_with_header
will look for a header specified and will allow or disallow based on a user in Radiant having the same value in the given attribute.
This requires that you manage your user accounts so that all active users have valid information listed in the Radiant database.
If you would like to change the Header, Attribute and/or Development Account used to authorize users from a rake task you may run
rake radiant:extensions:header_authorize:set HEADER='AUTHORIZED_USER' ATTRIBUTE='login' DEV_ACCOUNT='admin'
- The
HEADER
variable specifies the HTTP Header that will be used for authorization. - The
ATTRIBUTE
variable specifies the attribute on the user account that will be used for authorization. - The
DEV_ACCOUNT
variable specifies the information in a user account that will be used for authorization. If you would like to disable the DEV_ACCOUNT feature, simply set the value to an invalid value and restart.
Values are stored in the config database table as:
- authorization.header
- authorization.attribute
- authorization.development.account
Built by Saturn Flyer