Merge pull request #36 from afklm/no-auth

Add unset of basic auth header in web app config
bflad · Oct 6, 2014 · b74d872 · b74d872
2 parents ef00f32 + d8614e9
commit b74d872
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/templates/default/web_app.conf.erb b/templates/default/web_app.conf.erb
@@ -18,6 +18,9 @@
 	ErrorLog <%= node['stash']['apache2']['error_log'].empty? ? node['apache']['log_dir']+"/stash-error.log" : node['stash']['apache2']['error_log'] %>
 	LogLevel warn
 
+    # Make sure we disable/prevent basic authentication attempts since Stash 2.1+ can't handle them
+    RequestHeader unset Authorization
+
 	<Proxy *>
 		Order Deny,Allow
 		Allow from all
@@ -42,7 +45,10 @@
 	ErrorLog <%= node['stash']['apache2']['ssl']['error_log'].empty? ? node['apache']['log_dir']+"/stash-ssl-error.log" : node['stash']['apache2']['ssl']['error_log'] %>
 	LogLevel warn
 
-	<Proxy *>
+    # Make sure we disable/prevent basic authentication attempts since Stash 2.1+ can't handle them
+    RequestHeader unset Authorization
+
+    <Proxy *>
 		Order Deny,Allow
 		Allow from all
 	</Proxy>