#303 [audit-Nice] Possible to accidentally disable authentication
Closed: Fixed 7 years ago Opened 7 years ago by puiterwijk.

If OIDC_CLIENT_SECRETS is not set, possibly due to a typo, client authentication gets entirely disabled.
It would be preferable if the admin needs to explicitly disable it, for example with something like MBS_NO_AUTH = True.


Metadata Update from @mjia:
- Issue assigned to mjia

7 years ago

Merged already. I'm closing this one to get out of the radar :).

Metadata Update from @jkaluza:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

7 years ago

Login to comment on this ticket.

Metadata