tree 4c95b3b8a4cca23f627a06d8837a186eecf6ab5c
parent 63b35951db1900d2a234286431e6c1079a727dae
author Luca Milanesio <luca.milanesio@gmail.com> 1395458430 +0000
committer Luca Milanesio <luca.milanesio@gmail.com> 1395710713 +0000

Avoid OAuth with REST and RPC calls and static resources

When Gerrit UX is making REST API calls to the backend
by providing both an GerritAccount cookie and
a X-GERRIT-AUTH HTTP Header, the call can be safely
propagate to Gerrit for validation without having to
necessarily re-create a new GerritOAuth cookie.

Gerrit UX is unable anyway to complete the GitHub
OAuth handshake, there is no value then in getting
the calls redirected to GitHub as it would just break
the user interface.

Change-Id: Ie1566364be6eb647609971b88e2a30c78e012afe