Ah, thanks; I see that CSRF think you mentioned.

As mentioned here, the JSON interface doesn't yet support tickets
(though that would be a good use for it).  What I'm going to have to do
is write a "landing page" on my site which takes POST data and does a
shell to use fossil from the command-line.  Ugly, but it will work for
my purposes.

Thanks,
Ron

On 04/23/2012 08:06 PM, Dmitry Chestnykh wrote:
> On Mon, 23 Apr 2012, Ron Aaron wrote:
>
>> I'm trying to post a new "ticket" on one of my Fossil sites, from
>> another program.  The idea is that in my program (it's an Android app) I
>> present the user a form, and then post their information into my Fossil
>> site (a new ticket).
>>
>> I'm trying to POST information to my Fossil "tktnew" page, but am having
>> no success at all -- Fossil keep redirecting to the login page, even
>> though I granted "nobody" new ticket rights.
>
> I think what you see is a cross-site request forgery protection. You
> have to load the "new ticket" page and get the CSRF token from it to
> send along with your request.
>
> Maybe JSON will help?
>
> -- 
> Dmitry Chestnykh
> http://www.codingrobots.com
> _______________________________________________
> fossil-users mailing list
> [email protected]
> http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

Reply via email to