authelia/shared
Clement Michaud 6b78240d39 Fix endpoints redirection on errors
From this commit on, api endpoints reply with a 401 error code and non api
endpoints redirect to /error/40X.

This commit also fixes missing restrictions on /loggedin (the "already logged
in page). This was not a security issue, though.

The change also makes error pages automatically redirect the user after few
seconds based on the referrer or the default_redirection_url if provided in the
configuration.

Warning: The old /verify endpoint of the REST API has moved to /api/verify.
You will need to update your nginx configuration to take this change into
account.
2017-11-01 14:46:23 +01:00
..
types Split client and server 2017-10-07 00:49:42 +02:00
ErrorMessage.ts Add default_redirection_url as configuration option 2017-10-31 07:27:23 +01:00
RedirectionMessage.ts Add default_redirection_url as configuration option 2017-10-31 07:27:23 +01:00
SignMessage.ts Split client and server 2017-10-07 00:49:42 +02:00
UserMessages.ts Every public endpoints return 200 with harmonized error messages or 401 2017-10-14 11:57:38 +02:00
api.ts Fix endpoints redirection on errors 2017-11-01 14:46:23 +01:00
constants.ts Remove artifacts of only_basic_auth query param 2017-10-09 02:03:05 +02:00