Enforce token auth for odic config PUT call

This commit is contained in:
Samuel Oechsler
2024-10-30 20:35:01 +01:00
parent 7ef52d8ed4
commit 1a030a6ddd
4 changed files with 21 additions and 12 deletions

View File

@ -72,13 +72,14 @@ router
})
.then((row) => {
if (row.id === 'oidc-config') {
// redact oidc configuration via api
// Redact oidc configuration via api (unauthenticated get call)
let m = row.meta;
row.meta = {
name: m.name,
enabled: m.enabled === true && !!(m.clientID && m.clientSecret && m.issuerURL && m.redirectURL && m.name)
};
// remove these temporary cookies used during oidc authentication
// Remove these temporary cookies used during oidc authentication
res.clearCookie('npm_oidc');
res.clearCookie('npm_oidc_error');
}