authelia

Commit Graph

Author	SHA1	Message	Date
Clement Michaud	56fdc40290	Every public endpoints return 200 with harmonized error messages or 401 Now, /verify can return 401 or 403 depending on the user authentication. Every public API endpoints and pages return 200 with error message in JSON body or 401 if the user is not authorized. This policy makes it complicated for an attacker to know what is the source of the failure and hide server-side bugs (not returning 500), bugs being potential threats.	2017-10-14 11:57:38 +02:00
Clement Michaud	9559bff5de	Remove artifacts of only_basic_auth query param	2017-10-09 02:03:05 +02:00
Clement Michaud	d8ff186303	Split client and server Client and server now have their own tsconfig so that the transpilation is only done on the part that is being modified. It also allows faster transpilation since tests are now excluded from tsconfig. They are compiled by ts-node during unit tests execution.	2017-10-07 00:49:42 +02:00

Author

SHA1

Message

Date

Clement Michaud

56fdc40290

Every public endpoints return 200 with harmonized error messages or 401

Now, /verify can return 401 or 403 depending on the user authentication.
Every public API endpoints and pages return 200 with error message in
JSON body or 401 if the user is not authorized.

This policy makes it complicated for an attacker to know what is the source of
the failure and hide server-side bugs (not returning 500), bugs being potential
threats.

2017-10-14 11:57:38 +02:00

Clement Michaud

9559bff5de

Remove artifacts of only_basic_auth query param

2017-10-09 02:03:05 +02:00

Clement Michaud

d8ff186303

Split client and server

Client and server now have their own tsconfig so that the transpilation is only
done on the part that is being modified.

It also allows faster transpilation since tests are now excluded from tsconfig.
They are compiled by ts-node during unit tests execution.

2017-10-07 00:49:42 +02:00

3 Commits (b8c8c3bd7589abb4442a7c6c3cd3ea2303bc28f1)