X-Git-Url: https://git.proxmox.com/?p=pve-common.git;a=blobdiff_plain;f=src%2FPVE%2FTicket.pm;h=e9f8e3f1d5b8048f7b273ff8c34191c0ba24cd78;hp=68ea2851aa6cc2c5d65ee9e84422832781c0bc6b;hb=e97f807c388c10250f442b1f16c5315df2ffc2af;hpb=2b4582cb92982f355585e9bb0f93b2d920764252 diff --git a/src/PVE/Ticket.pm b/src/PVE/Ticket.pm index 68ea285..e9f8e3f 100644 --- a/src/PVE/Ticket.pm +++ b/src/PVE/Ticket.pm @@ -9,10 +9,12 @@ use MIME::Base64; use Digest::SHA; use Time::HiRes qw(gettimeofday); -use PVE::Exception qw(raise_perm_exc); +use PVE::Exception qw(raise); Crypt::OpenSSL::RSA->import_random_seed(); +use constant HTTP_UNAUTHORIZED => 401; + sub assemble_csrf_prevention_token { my ($secret, $username) = @_; @@ -38,7 +40,8 @@ sub verify_csrf_prevention_token { ($age < $max_age); } - raise_perm_exc("Permission denied - invalid csrf token") if !$noerr; + raise("Permission denied - invalid csrf token\n", code => HTTP_UNAUTHORIZED) + if !$noerr; return undef; } @@ -90,7 +93,8 @@ sub verify_rsa_ticket { } } - raise_perm_exc("permission denied - invalid $prefix ticket") if !$noerr; + raise("permission denied - invalid $prefix ticket\n", code => HTTP_UNAUTHORIZED) + if !$noerr; return undef; }