Avatars on private site

(Ahmad Suhendri) #1

Continuing the discussion from Avatar Subsystem redesign:

I see that avatar url also need authentication on private site with login required, not as static content.

# curl -I {base_url}/user_avatar/{base_url}/system/25/3.png
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 29 May 2014 02:51:42 GMT
Content-Type: text/html; charset=utf-8
Connection: close
Status: 302 Found
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Location: {base_url}/login
Cache-Control: no-cache
X-Request-Id: 64f631f3-282b-42bf-9644-608c1c2d6b7c
X-Runtime: 0.018516
X-UA-Compatible: IE=edge

So, this is will not work on site with CDN enabled.

Some avatars not loading after new subsystem deploy
(Sam Saffron) #2

This is now fixed via:

(Sam Saffron) #3

This topic was automatically closed after 24 hours. New replies are no longer allowed.