mirror of
https://github.com/gristlabs/grist-core.git
synced 2025-06-13 20:53:59 +00:00
Summary: By default, only respect GRIST_FORWARD_AUTH_HEADER on login endpoints; sessions are used elsewhere. With GRIST_IGNORE_SESSION, do not use sessions, and respect GRIST_FORWARD_AUTH_HEADER on all endpoints. GRIST_PROXY_AUTH_HEADER is now a synonym to GRIST_FORWARD_AUTH_HEADER. Test Plan: Fixed tests. Tested first approach (no GRIST_IGNORE_SESSION) with grist-omnibus manually. Tested the second approach (with GRIST_IGNORE_SESSION) with a Apache-based setup enforcing http basic auth on all endpoints. Reviewers: paulfitz, georgegevoian Reviewed By: paulfitz, georgegevoian Differential Revision: https://phab.getgrist.com/D4104 |
||
|---|---|---|
| .. | ||
| helpers | ||
| ACLFormula.ts | ||
| Assistance.ts | ||
| Authorizer.ts | ||
| DocApi2.ts | ||
| DocApi.ts | ||
| HostedStorageManager.ts | ||
| ManyFetches.ts | ||
| MemoryPool.ts | ||
| MinIOExternalStorage.ts | ||
| ProxyAgent.ts | ||
| Telemetry.ts | ||
| Webhooks-Proxy.ts | ||