Add Start/EndSetApiUser events when setting API user via OAuth

diff --git a/lib/apiauth.php b/lib/apiauth.php
index 8374c24a7fdfcf5d53a70a85d853e88becc73df5..f513ed2c9a02af77cf7595172efdd83170db268f 100644 (file)
--- a/lib/apiauth.php
+++ b/lib/apiauth.php
@@ -149,7 +149,10 @@ class ApiAuthAction extends ApiAction
                     $this->access = ($appUser->access_type & Oauth_application::$writeAccess)
                       ? self::READ_WRITE : self::READ_ONLY;
 
-                    $this->auth_user = User::staticGet('id', $appUser->profile_id);
+                    if (Event::handle('StartSetApiUser', array(&$user))) {
+                        $this->auth_user = User::staticGet('id', $appUser->profile_id);
+                        Event::handle('EndSetApiUser', array($user));
+                    }
 
                     $msg = "API OAuth authentication for user '%s' (id: %d) on behalf of " .
                       "application '%s' (id: %d).";