Mantis Bug Tracker - Forums

Is there a way for a plugin to determine if Mantis is being accessed via a REST API call vs. the web UI?

I'm using the Basic_Auth plugin, which fails if the api is called, because the REMOTE_USER is not set.

I created this file:
DOCROOT/mantis/api/.htaccess
with contents:
Require all granted

This allows me to navigate to the URL https://server/mantis/api without requiring HTTP authentication. So far so good!

However, when I call the REST API, the call fails because it tries to get the user in the ...

We're using the Basic_Auth plugin, so users are automatically logged in via the Apache authentication.

Mantis 2.25.6
PHP 7.4
Apache 2.4

To use the REST API, however , would require passing both the HTTP auth and the Mantis token
for example

issue_id=1234

curl --header "Authorization: $token ...

We recently got around to upgrading from our initial 1.1 installation to 1.3.

The only tricky part was the Authentication piece, because we had hacked up the source code to use BasicAuth. So this post is just to share our experience.

Basically we followed the Upgrade instructions, up to the ...