Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

REST: disallow overriding "credential" in table sessions #10345

Merged
merged 1 commit into from
Jul 4, 2024

Commits on Jun 5, 2024

  1. REST: disallow overriding "credential" in table sessions

    See apache#10256 for context.
    
    This change disallows overriding the "credential" property
    in table sessions, by introducing an allow-list of
    auth-related properties that can be overridden in such
    situations.
    
    Only the "token" property and properties used to exchange
    one token for another ("urn:ietf:params:oauth:token-type:*")
    are now allowed.
    adutra committed Jun 5, 2024
    Configuration menu
    Copy the full SHA
    f9d20a0 View commit details
    Browse the repository at this point in the history