r19140: allow own authentication handling by jsonrpc apps

(This used to be commit de2eb8df0c1aa361adbf14a5984b1719e17f70cb)

diff --git a/swat/scripting/common.js b/swat/scripting/common.js
index 299a67c7020b1da922eb75e55270500ee21644d0..fe25287a74c1aa6b434db4ba2731ca9fdcfe51c1 100644 (file)
--- a/swat/scripting/common.js
+++ b/swat/scripting/common.js
@@ -74,10 +74,18 @@ function page_footer() {
 */
 function always_allowed(uri) {
        var str = string_init();
+
+        /* allow jsonrpc-based applications to do their own authentication */
+        var s = str.split('/', uri);
+        if (s[0] == "" && s[1] == 'apps') {
+                return true;
+        }
+
        var s = str.split('.', uri);
        if (s.length < 2) {
                return false;
        }
+
        var ext = s[s.length-1];
        var allowed = new Array("ico", "gif", "png","css", "js");
        for (i in allowed) {