Ivan Kozlovic 69525f3083 [FIXED] Check for no_auth_user ...

Check for a no_auth_user should be done only when no authentication
at all is provided by the user. This was not the case. For instance,
if the user provided a token, the server would still check for
no_auth_user if users are defined. It was not really an issue since
the admin cannot configure users AND token, but it is better for
the application to fail if providing a token that is actually not
being used. If the admin configures a no_auth_user, this should
be used only when no authentication is provided.

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>

2021-12-14 10:00:54 -07:00

7.7 KiB

Raw Blame History

View Raw