Add Start/EndSetApiUser events when setting API user via OAuth

diff --git a/lib/apiauth.php b/lib/apiauth.php
index b4292408a1ecbc2c82f21e09f0d179e24c218027..927dcad6af47d9c139ed1084ddfc574c66f19808 100644 (file)
--- a/lib/apiauth.php
+++ b/lib/apiauth.php
@@ -148,7 +148,10 @@ class ApiAuthAction extends ApiAction
                     $this->access = ($appUser->access_type & Oauth_application::$writeAccess)
                       ? self::READ_WRITE : self::READ_ONLY;
 
-                    $this->auth_user = User::staticGet('id', $appUser->profile_id);
+                    if (Event::handle('StartSetApiUser', array(&$user))) {
+                        $this->auth_user = User::staticGet('id', $appUser->profile_id);
+                        Event::handle('EndSetApiUser', array($user));
+                    }
 
                     $msg = "API OAuth authentication for user '%s' (id: %d) on behalf of " .
                       "application '%s' (id: %d).";