mirrors/mastodon
1
0
Fork 1
mirror of https://github.com/glitch-soc/mastodon synced 2025-04-24 21:14:51 +00:00
Code Issues Projects Releases Packages Wiki Activity

Change devise to not use HTTP Basic Authentication (#34501)

Browse source
This commit is contained in:
Emelia Smith 2025-04-22 14:11:21 +02:00 • committed by GitHub
parent cba4682ced
commit b754e28190
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
config/initializers/devise.rb
View file

@ -158,13 +158,15 @@ Devise.setup do |config|
# given strategies, for example, `config.params_authenticatable = [:database]` will # given strategies, for example, `config.params_authenticatable = [:database]` will
# enable it only for database (email + password) authentication. # enable it only for database (email + password) authentication.
# config.params_authenticatable = true # config.params_authenticatable = true
config.params_authenticatable = true
# Tell if authentication through HTTP Auth is enabled. False by default. # Tell if authentication through HTTP Auth is enabled. False by default.
# It can be set to an array that will enable http authentication only for the # It can be set to an array that will enable http authentication only for the
# given strategies, for example, `config.http_authenticatable = [:database]` will # given strategies, for example, `config.http_authenticatable = [:database]` will
# enable it only for database authentication. The supported strategies are: # enable it only for database authentication. The supported strategies are:
# :database = Support basic authentication with authentication key + password # :database = Support basic authentication with authentication key + password
config.http_authenticatable = [:pam, :database] # config.http_authenticatable = [:pam, :database]
config.http_authenticatable = false
# If 401 status code should be returned for AJAX requests. True by default. # If 401 status code should be returned for AJAX requests. True by default.
# config.http_authenticatable_on_xhr = true # config.http_authenticatable_on_xhr = true