Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Determine if WebAPI has security enabled #178

Open
anthonysena opened this issue Mar 17, 2021 · 0 comments
Open

Determine if WebAPI has security enabled #178

anthonysena opened this issue Mar 17, 2021 · 0 comments

Comments

@anthonysena
Copy link
Collaborator

As suggested here: #177 (comment).

Can we interrogate WebAPI to see if security is enabled? The answer is 'yes' if the version is 2.8 or higher. The WebAPI/info endpoint will provide those details as shown in the abbreviated JSON response:

{
	"version": "2.8.0",
	"buildInfo": {...},
	"configuration": {
		"security": {
			"samlActivated": false,
			"enabled": false,
			"samlEnabled": false
		},...
	}
}

So we might consider adding to the authenticate.R methods a check to this endpoint to see if authorization is even required.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants