Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

parameter fix for semi auth #523

Merged
merged 1 commit into from
Dec 28, 2023
Merged

parameter fix for semi auth #523

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,11 @@

All notable changes to the Zlux Server Framework package will be documented in this file..
This repo is part of the app-server Zowe Component, and the change logs here may appear on Zowe.org in that section.


## 2.14.0
- Bugfix: A call to GET /plugins would trigger an authorization check regardless of if rbac was set on or off


## 2.13.0
- Added support for using zowe.network and components.app-server.zowe.network to set listener IP and TLS properties including max and min version, ciphers, and ECDH curves. (#511)
- Enhanced cipher customization to allow for ciphers to be specified in IANA format in addition to the existing OpenSSL format. (#511)
Expand Down
2 changes: 1 addition & 1 deletion lib/webauth.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -500,7 +500,7 @@ module.exports = function(authManager, cookieIdentifier, isSecurePort) {
authLogger.debug(`${req.session.id}: Initiating isAuthorized check with ${handler.pluginID}`);
result = yield handler.authorized(req, authPluginSession, {
syncOnly: isWebsocket,
bypassAuthorizatonCheck: !authManager.isRbacEnabled
bypassAuthorizatonCheck: !authManager.isRbacEnabled()
});
next();
return;
Expand Down
Loading