OpenProject is the leading open source project management software.

kanbanworkflowstimelinescrumrubyroadmapproject-planningproject-managementopenprojectangularissue-trackerifcgantt-chartganttbug-trackerboardsbcf

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

ulferts c88b0b85c4 return proper WWW Authenticate header on missing credentials (#6150) ... An anonymous_fallback is introduced and registered to be the last strategy for warden. That strategy will always apply and it will always return the anonymous user. The better way would be to only apply the strategy if login is not required. That way we would still be able to return a 403 when credentials are missing but would no longer need to have 401 handlers outside of warden. That duplicity caused the missing header in the first place. It would however require us to handle the realm in the strategy and by that increase the coupling between the strategy and the application. [ci skip]		7 years ago
..
anonymous_fallback.rb	return proper WWW Authenticate header on missing credentials (#6150)	7 years ago
basic_auth_failure.rb	moved strategies; refactoring	10 years ago
global_basic_auth.rb	Provide configuration option for basic auth API access	8 years ago
session.rb	Restrict session API authentication to X-Requested-With	7 years ago
user_basic_auth.rb	Provide configuration option for basic auth API access	8 years ago