funcool / funcool/buddy

JWT Backend not using authfn when authentication header is missing

Open
#45 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Clojure
Stars
844
Forks
37
PR merge metrics
No merged PRs in 30d

Description

When I use `jws` backend and send request without `Authentication` header, the request goes through. I am not sure if it should be like this, because if I require the token to be there, it should fail.

I have a bad feeling I am missing something and that it's working as inteded and it is me who misconfigured something, but in that case I found no evidence of how to make that fail when header is missing.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.