this is a duplicate of https://groups.google.com/forum/?fromgroups=#!topic/web2py/c4uZ36Gw7WY ... taken care of already by Anthony ^_^
On Wednesday, March 27, 2013 4:36:25 PM UTC+1, Massimo Di Pierro wrote: > > user_signature requires that you are logged in. Are you logged in when you > generate the signed URL? > > On Wednesday, 27 March 2013 02:30:04 UTC-5, yashar wrote: >> >> here is the link : >> <script> >> window.location.href = >> '{{=URL('CS','close_inqueries',user_signature=True)}}' + '&' + data; >> </script> >> >> and here is the controler: >> def close_inqueries(): >> print request.vars >> print '-'*20 >> print session >> >> and here is the result: >> <Storage {'_signature': '180b1866f14c585f249ee0a3d8b74778e1ff79a0', >> 'Sea-24': 'on'}> >> -------------------- >> <Storage {'_user_agent': {'os': {'name': 'Linux'}, 'is_tablet': False, >> 'is_mobile': False, 'dist': {'name': 'Ubuntu'}, 'browser': {'version': >> '19.0', 'name': 'Firefox'}}, '_auth_next': None, 'flash': None, >> 'user_type': 'CS', 'auth': <Storage {'hmac_key': >> 'bbdd4f5d-2cfa-4ee8-a7b4-c08a3b7874ee', 'remember': False, 'last_visit': >> datetime.datetime(2013, 3, 27, 11, 48, 35, 442411), 'expiration': 3600, >> 'user': <Row {'first_name': 'ali', 'last_name': 'naghi', 'registration_id': >> '', 'email': 'a...@naghi.com', 'reset_password_key': '', >> 'registration_key': '', 'id': 4}>, 'user_groups': {3: 'user_4'}}>, >> 'nickname': 'ali', '_session_hash': 'c55603687a5f7482dda9b0d85a7a78e1', >> '_formkey[login]': 'c8974fec-1b1d-4c47-9f5c-dbd4c765542c'}> >> >> as you see _signature and hmac_key have different values and i think this >> is the reason i get non authorized alert when i add >> @auth.requires_signature() to controller. >> >> what is the correct way to do this? >> >> > -- --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to web2py+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.