-
Notifications
You must be signed in to change notification settings - Fork 59
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: Authentication can be optionally disabled #89
Conversation
Codecov Report
@@ Coverage Diff @@
## master #89 +/- ##
==========================================
+ Coverage 66.22% 66.24% +0.01%
==========================================
Files 367 367
Lines 5860 5866 +6
Branches 893 894 +1
==========================================
+ Hits 3881 3886 +5
- Misses 1979 1980 +1
Continue to review full report at Codecov.
|
env.js
Outdated
@@ -39,6 +41,7 @@ module.exports = { | |||
BASE_URL, | |||
CORS_PROXY_PREFIX, | |||
NODE_ENV, | |||
STATUS_URL | |||
STATUS_URL, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Two small things:
- These are sorted alphabetically, would prefer if you can keep that.
- It's not documented, but the way this object works is that items in
processEnv
will be sent to the client, and items outside of it are available on the server. I think this new variable should be in both places, so can you add it at both levels of the object?
# [0.9.0](http://github.com/lyft/flyteconsole/compare/v0.8.1...v0.9.0) (2020-08-24) ### Features * Authentication can be optionally disabled ([#89](http://github.com/lyft/flyteconsole/issues/89)) ([d92a127](http://github.com/lyft/flyteconsole/commit/d92a1277af27a31863103eeda231d71b4e037151))
🎉 This PR is included in version 0.9.0 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
TL;DR
FlyteConsole enables authentication by default. This has a weird side-effect in Sandbox, where the console enables secure cookies, even if we actually do not have authN. in this situation, Chrome does not allow CORS with a wild card of
*
. This PR allows disabling authN and which should allow working with CORsType
Are all requirements met?
Complete description
Disable credentials in case when authn is not used / required. This will allow CORs wildcard. Particularly helpful in sandbox testing.
Tracking Issue
flyteorg/flyte#416
Follow-up issue
NA