diff options
| author | Alexander Strizhakov <alex.strizhakov@gmail.com> | 2020-06-24 11:16:09 +0300 |
|---|---|---|
| committer | Alexander Strizhakov <alex.strizhakov@gmail.com> | 2020-10-13 16:43:58 +0300 |
| commit | c497558d433216c12a3335d138716a10d464a922 (patch) | |
| tree | c9c089a0e9d2d34c8f019124c3d9678188ffc78f /docs/dev.md | |
| parent | c1777e74796d3be4757826ddb3395fc0c13495ff (diff) | |
| download | pleroma-c497558d433216c12a3335d138716a10d464a922.tar.gz | |
AuthenticationPlug module name
Diffstat (limited to 'docs/dev.md')
| -rw-r--r-- | docs/dev.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docs/dev.md b/docs/dev.md index e3e04c8eb..22e0691f1 100644 --- a/docs/dev.md +++ b/docs/dev.md @@ -16,7 +16,7 @@ This document contains notes and guidelines for Pleroma developers. ## [HTTP Basic Authentication](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Authorization) -* With HTTP Basic Auth, OAuth scopes check is _not_ performed for any action (since password is provided during the auth, requester is able to obtain a token with full permissions anyways). `Pleroma.Plugs.AuthenticationPlug` and `Pleroma.Web.Plugs.LegacyAuthenticationPlug` both call `Pleroma.Web.Plugs.OAuthScopesPlug.skip_plug(conn)` when password is provided. +* With HTTP Basic Auth, OAuth scopes check is _not_ performed for any action (since password is provided during the auth, requester is able to obtain a token with full permissions anyways). `Pleroma.Web.Plugs.AuthenticationPlug` and `Pleroma.Web.Plugs.LegacyAuthenticationPlug` both call `Pleroma.Web.Plugs.OAuthScopesPlug.skip_plug(conn)` when password is provided. ## Auth-related configuration, OAuth consumer mode etc. |