[openstreetmap/openstreetmap-website] Return an error when a disabled authentication mechanism is used (PR #4496)

mmd notifications at github.com
Wed Feb 7 21:30:27 UTC 2024


Assuming we set `basic_auth_support: false`, an API user would see one of these two error messages:

* HTTP 403 HTTP Basic Authentication is disabled 
* HTTP 403 Couldn't authenticate you

I'm wondering if this makes much of a difference for a user, when they can't use Basic auth anyway and need to switch to OAuth 2. Tbh, I'm struggling a bit to see the benefit of checking whether the credentials are valid.




-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/4496#issuecomment-1932969719
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/4496/c1932969719 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20240207/af8e751a/attachment.htm>


More information about the rails-dev mailing list