security::debug_return_url_signature (private)

 security::debug_return_url_signature stage [ url ] [ signature ]

Defined in packages/acs-tcl/tcl/security-procs.tcl

Temporary, opt-in diagnostics for file-storage return_url signatures. Enable from nscp for fifteen minutes (optionally limit normal-path observations to one peer): 

    nsv_set security_return_url_signature_debug settings [list  until [expr {[clock seconds] + 900}] peer 91.114.61.250]
Disable with nsv_unset security_return_url_signature_debug settings. Malformed-signature observations ignore the peer filter. The target defaults to /storage/download-zip; settings may specify another path. Fields ending in _urlencoded must be decoded exactly once to recover the observed text, including the distinction between + and %2B. Fields are length-bounded with explicit truncation flags. Signing secrets, cookies and authorization headers are never collected. Diagnostics must not change request or signature-validation behavior.

Parameters:
stage (required)
url (optional)
signature (optional)

Partial Call Graph (max 5 caller/called nodes):
ad_get_login_url ad_get_login_url (public) security::debug_return_url_signature security::debug_return_url_signature ad_get_login_url->security::debug_return_url_signature ad_returnredirect ad_returnredirect (public) ad_returnredirect->security::debug_return_url_signature ad_verify_signature ad_verify_signature (public) ad_verify_signature->security::debug_return_url_signature ad_verify_signature_with_expr ad_verify_signature_with_expr (public) ad_verify_signature_with_expr->security::debug_return_url_signature export_vars export_vars (public) export_vars->security::debug_return_url_signature

Testcases:
No testcase defined.
[ show source ]
Show another procedure: