zopefoundation / Zope / 8811647767 / 1

82%

master: 82%

push

github

Fix authentication error viewing ZMI resource with virtual hosting (#1204)

* ZMI: re-implement the logic to prepend authentication path

The previous approach from #1196 was not correct when using virtual host,
because AUTHENTICATION_PATH is not usable in virtual host contexts.

This uses a different approach, by making the js and css path
subscribers take care of generating the URLs with the authentication
path prepended using request API aware of virtual hosting.

* ZMI: use /++resource++logo/ for public resources

/++resource++zmi/logo/ and /++resource++logo/ is the same folder on disk,
the former is protected by Manage portal and the later is public.
Protected resources were problematic, because we want to serve them from
the root, but the manager user might not have permission on the root.

* ZMI: include zmi.localstorage.api.js using js subscriber

Using this approach we serve a resource relative to the path where user
is authenticated.

* copyright.dtml: update bootstrap URL

This was referencing an old URL.

Co-authored-by: Maurits van Rees <maurits@vanrees.org>

4521 of 7144 branches covered (63.28%)

Branch coverage included in aggregate %.

28167 of 32506 relevant lines covered (86.65%)

0.87 hits per line