How are authorization's handled for requests

[Stephen]

Describe the issue or problem
We noticed that requests such as the following POST do not include an authorization header.

https://journals.flvc.org:443/edis/$$$call$$$/wizard/file-upload/file-upload-wizard/upload-file?submissionId=139130&stageId=3&fileStage=15&reviewRoundId=17275&assocType=&assocId=&queryId=

Can you explain how authorization is handled for requests like this? Is cookie auth being used?

We are currently running OJS 3.3.0.19

[asmecher]

Hi @Stephen,

OJS 3.3.0-x uses cookie based authentication for requests like this.

Regards,
Alec Smecher
Public Knowledge Project Team