You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When an API user is first created in the web interface, their allowed_ips value is omitted entirely, granting them access from any IP. However, after setting a value for this field and then later clearing it, the value in mongodb is set to "allowed_ips" : [ "" ], which means they are granted access from no IP address. This is inconsistent with the default behaviour for not specifying a value for this field.
The text was updated successfully, but these errors were encountered:
Ah, yeah, this is a bug with the allowed IPs and referrers. It's fixed in master and will be part of the v0.7 package release. Sorry for the issue!
I thought I was going to get the v0.7 packages released last week, but I'm aiming for the end of this week instead. If you don't want to wait for the fix, you can deploy master on top of your existing install, but waiting for the packages may be easier.
Thanks. I did a search before raising the bug but didn't notice that one since the title was referring to the referrer. Is there a way to build a custom package from the source instead? This is one thing I haven't been able to figure out how to do yet.
When an API user is first created in the web interface, their allowed_ips value is omitted entirely, granting them access from any IP. However, after setting a value for this field and then later clearing it, the value in mongodb is set to
"allowed_ips" : [ "" ]
, which means they are granted access from no IP address. This is inconsistent with the default behaviour for not specifying a value for this field.The text was updated successfully, but these errors were encountered: