Unauthenticated users can access Cryptpad instance
Open
- Dominant language
- Go Template
- Stars
- 13
- Forks
- 15
- Avg merge
- 14h 16m
- Merged PRs (30d)
- 1
Description
Test with the OpenDesk project deployment, on Kubernetes cluster with [NextCloud sync](https://github.com/cryptpad/nextcloud-open-in-cryptpad/), and OpenID authentication.
Step to reproduce:
- Log to the platform, access a diagram file on NextCloud
- copy the URL of the diagram and open it in a private window
- Expected result: unregistered user will have credentials required
- Current result: unregistered user can access and download the diagram:
Contributor guide
Assessment
This issue has not been assessed yet.