Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

adds a flag to the onelogin config to requireAuthentication #60

Merged
merged 1 commit into from
Feb 2, 2015

Conversation

cfieber
Copy link
Contributor

@cfieber cfieber commented Feb 2, 2015

if present, all requests aside from the /auth endpoint require and authenticated session.

effectively disables access from the api client for scripting, but supports a browser only mode

we can add a different supported auth mechanism for scripting clients to authenticate in the future and
make this a non optional flag

if present, all requests aside from the /auth endpoint require and authenticated session.

effectively disables access from the api client for scripting, but supports a browser only mode

we can add a different supported auth mechanism for scripting clients to authenticate in the future and
make this a non optional flag
@cfieber
Copy link
Contributor Author

cfieber commented Feb 2, 2015

I've tested the behaviour of this with deck and it seems to behave well:

  • no existing session (private browsing mode)
  • existing valid session
  • existing expired session (does the 'logging you in' dialog and works fine afterwords)

@@ -60,15 +59,27 @@ class OneLoginSecurityConfig extends WebSecurityConfigurerAdapter {
@ConfigurationProperties("onelogin")
static class OneLoginSecurityConfigProperties {
Boolean enabled
Boolean requireAuthentication
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

if not present will be false to match previous behaviour

cfieber added a commit that referenced this pull request Feb 2, 2015
adds a flag to the onelogin config to requireAuthentication
@cfieber cfieber merged commit 9b26867 into master Feb 2, 2015
@cfieber cfieber deleted the enable_manditory_auth branch February 2, 2015 23:05
abhinaybyrisetty referenced this pull request in OpsMx/gate Mar 11, 2021
@spinnakerbot spinnakerbot mentioned this pull request Mar 6, 2022
apoorvmahajan pushed a commit to apoorvmahajan/gate that referenced this pull request Aug 29, 2022
kirangodishala pushed a commit to kirangodishala/gate that referenced this pull request May 23, 2023
Auth turned off for static and runtime policy trigger APIs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant