Skip to content

Conversation

@nicofrand
Copy link
Contributor

…n is set

Problem

  • The documentation is incomplete regarding auth headers

Solution

  • Explain that the headers are set only if the right permission is set.

PR checklist

  • PR finished and ready to be reviewed

This documentation apply to YunoHost\>=12. On YunoHost \<12 the header was a bit different but the idea was the same.

Internally, SSOwat will on-the-fly inject theses different headers:
Internally, SSOwat will on-the-fly inject theses different headers, if the `resources.main.auth_header` permission is set to true in the app's manifest:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, true for all of them except for the Basic Auth Header, isn't it?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh, I reconsider what I say above, my apologies 🤐.

You may actually be right, even the Basic Auth header may require that permission if I understand this test:
https://github.com/YunoHost/yunohost/blob/477bf84bf40cae532da7b152ba766a072046b3a2/tests/test_sso_and_portalapi.py#L316-L331

I let a well-informed reviewer confirm that.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants