From: Michael Tremer <michael.tremer@ipfire.org>
Date: Mon, 2 Mar 2026 17:44:52 +0000 (+0000)
Subject: dbl: Use a HTTP header to impersonate users
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b70dd0a5bdebd0a266721310daee790f3375f1fa;p=ipfire.org.git

dbl: Use a HTTP header to impersonate users

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/backend/dbl.py b/src/backend/dbl.py
index 63e1e06c..a196bea4 100644
--- a/src/backend/dbl.py
+++ b/src/backend/dbl.py
@@ -238,10 +238,14 @@ class List(Model):
 		if isinstance(reported_by, accounts.Account):
 			reported_by = reported_by.uid
 
+		# Compose the headers
+		headers = {
+			"X-Impersonated-Uid" : reported_by,
+		}
+
 		# Compose the request body
 		body = {
 			"name"        : name,
-			"reported_by" : reported_by,
 			"comment"     : comment,
 			"block"       : block
 		}