Skip to content

Fix https-only behaviour#49

Open
tripsolutions wants to merge 1 commit intowichert:masterfrom
tripsolutions:fix-https-only
Open

Fix https-only behaviour#49
tripsolutions wants to merge 1 commit intowichert:masterfrom
tripsolutions:fix-https-only

Conversation

@tripsolutions
Copy link
Copy Markdown

Because set_jwt_authentication_policy's https_only parameter had a default value set to True the ini-file value was never being picked up. You would need to explicitly pass https_only=None to set_jwt_cookie_authentication_policy for the ini-file value to be considered. The ini-file value would also always be a string.

- read from ini-file unless overridden from parameter
- convert from string to bool, required for ini-file setting
@tripsolutions
Copy link
Copy Markdown
Author

I have rewritten this PR to perform the conversion using pyramid.settings.asbool in the authentication policy constructor, seems a more sensible approach that I've seen in PR #47. I've left this PR because PR #47 seems to have a bit of scope creep.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants