Skip to content

Explain that SSO headers are set only if the associated app permissio…#2628

Open
nicofrand wants to merge 1 commit intoYunoHost:mainfrom
nicofrand:patch-6
Open

Explain that SSO headers are set only if the associated app permissio…#2628
nicofrand wants to merge 1 commit intoYunoHost:mainfrom
nicofrand:patch-6

Conversation

@nicofrand
Copy link
Copy Markdown
Contributor

…n is set

Problem

  • The documentation is incomplete regarding auth headers

Solution

  • Explain that the headers are set only if the right permission is set.

PR checklist

  • PR finished and ready to be reviewed

This documentation apply to YunoHost\>=12. On YunoHost \<12 the header was a bit different but the idea was the same.

Internally, SSOwat will on-the-fly inject theses different headers:
Internally, SSOwat will on-the-fly inject theses different headers, if the `resources.main.auth_header` permission is set to true in the app's manifest:
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, true for all of them except for the Basic Auth Header, isn't it?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh, I reconsider what I say above, my apologies 🤐.

You may actually be right, even the Basic Auth header may require that permission if I understand this test:
https://github.com/YunoHost/yunohost/blob/477bf84bf40cae532da7b152ba766a072046b3a2/tests/test_sso_and_portalapi.py#L316-L331

I let a well-informed reviewer confirm that.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants