Files
gristlabs_grist-core/app/server/lib
Dmitry S 3210eee24f (core) Revamp ForwardAuthLogin and unify with GRIST_PROXY_AUTH_HEADER
Summary:
By default, only respect GRIST_FORWARD_AUTH_HEADER on login endpoints; sessions are used elsewhere.

With GRIST_IGNORE_SESSION, do not use sessions, and respect GRIST_FORWARD_AUTH_HEADER on all endpoints.

GRIST_PROXY_AUTH_HEADER is now a synonym to GRIST_FORWARD_AUTH_HEADER.

Test Plan: Fixed tests. Tested first approach (no GRIST_IGNORE_SESSION) with grist-omnibus manually. Tested the second approach (with GRIST_IGNORE_SESSION) with a Apache-based setup enforcing http basic auth on all endpoints.

Reviewers: paulfitz, georgegevoian

Reviewed By: paulfitz, georgegevoian

Differential Revision: https://phab.getgrist.com/D4104
2023-11-07 16:30:49 -05:00
..
2023-11-01 10:49:33 -04:00
2023-11-01 10:49:33 -04:00
2023-08-21 09:15:53 -04:00
2023-11-01 10:49:33 -04:00
2023-01-26 09:47:14 +01:00
2022-02-19 09:46:49 +00:00
2022-02-19 09:46:49 +00:00
2023-10-11 17:36:58 -04:00
2022-06-17 21:53:20 +02:00
2023-09-27 14:49:23 +02:00
2023-02-20 22:46:36 -05:00
2022-07-04 10:42:40 -04:00
2023-04-03 13:29:35 -04:00
2022-07-04 10:42:40 -04:00
2023-10-11 17:36:58 -04:00
2023-05-23 15:50:15 -04:00
2022-04-01 15:24:19 -07:00
2023-07-30 15:13:43 -04:00
2023-10-11 17:36:58 -04:00
2023-11-01 10:49:33 -04:00
2020-07-21 20:39:10 -04:00
2023-11-01 10:49:33 -04:00
2022-08-25 12:38:36 -07:00