commit 352585d4ded0fc4254cb192da31715605364e86d
author Bogdan Caprita <caprita@google.com> Tue May 31 09:38:39 2016 -0700
committer Bogdan Caprita <caprita@google.com> Tue May 31 16:58:52 2016 +0000
tree 2a18c1d7c156d623b1e139e9093cf293db130168
parent ce37844a8ad1a48d091bfbca0a98494d1c24b67b

allocatord: prevent stats handler from triggering oauth flow

Otherwise, the handler will set the csrf cookie, but will fail to
complete the flow via the oauth handler since the stats request is made
via ajax (so the redirect never happens).

This CL makes the distinction between handlers that want the oauth flow,
and handlers that only want to check if the user is logged in (but
proceed with an empty email address if not).  The stats handler will
return a new NotLoggedIn field in the JSON result in this case.

Change-Id: I6058d85d4d4c896c1b3751477f8bcda6e08982de