gristlabs_grist-core/app
Dmitry S 3210eee24f (core) Revamp ForwardAuthLogin and unify with GRIST_PROXY_AUTH_HEADER
Summary:
By default, only respect GRIST_FORWARD_AUTH_HEADER on login endpoints; sessions are used elsewhere.

With GRIST_IGNORE_SESSION, do not use sessions, and respect GRIST_FORWARD_AUTH_HEADER on all endpoints.

GRIST_PROXY_AUTH_HEADER is now a synonym to GRIST_FORWARD_AUTH_HEADER.

Test Plan: Fixed tests. Tested first approach (no GRIST_IGNORE_SESSION) with grist-omnibus manually. Tested the second approach (with GRIST_IGNORE_SESSION) with a Apache-based setup enforcing http basic auth on all endpoints.

Reviewers: paulfitz, georgegevoian

Reviewed By: paulfitz, georgegevoian

Differential Revision: https://phab.getgrist.com/D4104
2023-11-07 16:30:49 -05:00
..
client (core) Improve dark mode in tutorials 2023-11-06 13:06:13 -05:00
common (core) Improve dark mode in tutorials 2023-11-06 13:06:13 -05:00
gen-server (core) Add new telemetry events 2023-11-01 10:49:33 -04:00
plugin (core) support for bundling custom widgets with the Grist app 2023-10-27 17:00:10 -04:00
server (core) Revamp ForwardAuthLogin and unify with GRIST_PROXY_AUTH_HEADER 2023-11-07 16:30:49 -05:00
tsconfig.json (core) move home server into core 2020-07-21 20:39:10 -04:00