distribution

Commit Graph

Author	SHA1	Message	Date
Stephen J Day	b1f36c3fe5	Ensure that unset Context.Name only allowed on base route If Context.Name is not set, the acceess controller may allow an unintended request through. By only allowing a request to proceed without a name on the base route, we provide some protection if future bugs forget to set the context properly.	2014-12-18 17:25:06 -08:00
Stephen J Day	d0a9e9b475	Integrate auth.AccessController into registry app This changeset integrates the AccessController into the main registry app. This includes support for configuration and a test implementation, called "silly" auth. Auth is only enabled if the configuration is present but takes measure to ensure that configuration errors don't allow the appserver to start with open access.	2014-12-18 12:34:56 -08:00

Author

SHA1

Message

Date

Stephen J Day

b1f36c3fe5

Ensure that unset Context.Name only allowed on base route

If Context.Name is not set, the acceess controller may allow an unintended
request through. By only allowing a request to proceed without a name on the
base route, we provide some protection if future bugs forget to set the context
properly.

2014-12-18 17:25:06 -08:00

Stephen J Day

d0a9e9b475

Integrate auth.AccessController into registry app

This changeset integrates the AccessController into the main registry app. This
includes support for configuration and a test implementation, called "silly"
auth. Auth is only enabled if the configuration is present but takes measure to
ensure that configuration errors don't allow the appserver to start with open
access.

2014-12-18 12:34:56 -08:00

2 Commits (11ed0515d057c18781c7720bc04723fff60b734e)