<html>
<head>
<base href="https://bugs.documentfoundation.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_UNCONFIRMED "
title="UNCONFIRMED - MediaWiki publisher does not work with Wiki configured to use Basic Authentication"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=113743">113743</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>MediaWiki publisher does not work with Wiki configured to use Basic Authentication
</td>
</tr>
<tr>
<th>Product</th>
<td>LibreOffice
</td>
</tr>
<tr>
<th>Version</th>
<td>5.4.2.2 release
</td>
</tr>
<tr>
<th>Hardware</th>
<td>All
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Status</th>
<td>UNCONFIRMED
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>medium
</td>
</tr>
<tr>
<th>Component</th>
<td>Extensions
</td>
</tr>
<tr>
<th>Assignee</th>
<td>libreoffice-bugs@lists.freedesktop.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>sven.neuz@serpenteq.com
</td>
</tr></table>
<p>
<div>
<pre>Description:
It is impossible to publish documents to a MediaWiki with the provided
extension if the Wiki uses Basic Authentication instead of the Wiki logon
screen.
Basic Authentication is officially supported by MedIaWiki, so the extension
should be able to handle it.
It fails as early as adding the URL to the server list.
Tested on Linux and Windows. Both behave the same (the JAR file of the
extension is the same anyways).
Steps to Reproduce:
1. Configure a MediaWiki that uses Basic Authentication
a. Requires wfLoadExtension( 'Auth_remoteuser' ); in LocalSettings.php
b. Requires matching Apache Config
2. Add the Wiki to the MediaWiki Publisher Extension
3. Even adding the URL will fail. The server log will show it responded with
401 (as it should be)
Actual Results:
Adding the URL to the MediWiki fails. Posting articles if of course also
impossible then.
Expected Results:
The extension detects the Basic Authentication and uses it instead of the Wiki
logon screen.
Reproducible: Always
User Profile Reset: No
Additional Info:
It is possible to patch the extension to always include the Basic Auth header
by adding
String basicAuth =
Base64.getEncoder().encodeToString((sWikiUser+":"+sWikiPass).getBytes(StandardCharsets.UTF_8));
connGet.setRequestProperty("Authorization", "Basic " + basicAuth);
Note that the User/Password variable names are different depending on the part
of the change.
This is of course just an ugly hack to prove it is working and actually a very
bad idea to always send user and password even on plain text connections, so
please do not use this in a productive environment.
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101
Firefox/56.0</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>