From 96135fa7855ce22fd2ce7c7f0d59f99800216a50 Mon Sep 17 00:00:00 2001 From: Alexis de Lattre Date: Wed, 3 Jun 2015 23:52:50 +0200 Subject: [PATCH] [FIX] http: correct authentication via JSON-RPC. Since 31d817e, we rotate then session at login/logout. Unfortunatly, `openerpframework.js` does not support session id change at authentication and keep old one. In order to keep compatibility with existing js clients (including 7.0 ones), we do not rotate the session at authentication. Fixes #6948 Closes #6949 --- openerp/http.py | 1 - 1 file changed, 1 deletion(-) diff --git a/openerp/http.py b/openerp/http.py index 00a4cd3c239..71678bf3aa8 100644 --- a/openerp/http.py +++ b/openerp/http.py @@ -955,7 +955,6 @@ class OpenERPSession(werkzeug.contrib.sessions.Session): uid = dispatch_rpc('common', 'authenticate', [db, login, password, env]) else: security.check(db, uid, password) - self.rotate = True self.db = db self.uid = uid self.login = login