Metacat

Fix a bug in testing the validity of the CGI Session. It can't be empty or expired.

refs https://github.nceas.ucsb.edu/KNB/arctic-data/issues/42

Validate the session during the modification stage, rather than just assuming a CGI session (support tokens too).

Also, fix the XML document validation issue where an <additionalParty> element is added prior to the <metadataProvider> element. This seems to be an intermittent issue, and may be due to more recent versions of perl returning hash contents more randomly than previous versions. The %orig hash passed in to personnelList() is assumed to be random now, and I just ensured the metadataProvider is first in the produced string....

Modify getCredentials() to support token-based credentials.

refs https://github.nceas.ucsb.edu/KNB/arctic-data/issues/42

We ended up not being able to use IO::Socket::SSL, so I removed the import statement. Also, add the new Perl module dependencies to the installation documentation.

refs https://github.nceas.ucsb.edu/KNB/arctic-data/issues/42

Change getUsername() to also support adding usernames into an EML access element from the authentication token's 'sub' claim.
Also, add a bit of debugging output for tracing the flow of the XML generation.

refs https://github.nceas.ucsb.edu/KNB/arctic-data/issues/42

Modify the Metacat.pm upload() method to use the correct Content-Type for the form. RFC 2388 specifies that the Content-Type should be "multipart/form-data", and that the Content-Disposition should be "form-data", along with the "name" parameter.

dd the hasValidAuthToken() method to determine if the current token (if any) is valid. Use this and validateSession() within the script to determine if we need to call Metacat->login() or not. Add some minor debugging to work through the code stages using auth tokens....

Fix a couple of syntax issues.

refs https://github.nceas.ucsb.edu/KNB/arctic-data/issues/42

Don't forget to set the token variable from the HTTP_AUTHORIZATION environment variable.

refs https://github.nceas.ucsb.edu/KNB/arctic-data/issues/42

Add a setAuthToken() method. when the HTTP_AUTHORIZATION environment variable is set, set the value as the `auth_token_header` instance variable in the Metacat instance passed in. This requires that the Apache installation includes an HTTP rewrite rule to pass the header on to an CGI processing the request. Call this method whenever we instantiate a Metacat object....