mirror of
https://github.com/discourse/discourse.git
synced 2026-08-11 02:59:07 +08:00
17e4bb4109DiscourseConnect verified SSO payload signatures with whatever `discourse_connect_secret` was configured, including an empty string, so an instance with DiscourseConnect enabled but no secret set did not fail safely. `DiscourseConnectBase#parse` now fails when the effective secret is blank, and `EnableSsoValidator` refuses to enable DiscourseConnect unless a secret of at least 10 characters is set. |
||
|---|---|---|
| .. | ||
| db_provider_spec.rb | ||
| defaults_provider_spec.rb | ||
| dependency_graph_spec.rb | ||
| deprecated_settings_spec.rb | ||
| hidden_provider_spec.rb | ||
| local_process_provider_multisite_spec.rb | ||
| local_process_provider_spec.rb | ||
| type_supervisor_spec.rb | ||
| validations_spec.rb | ||
| yaml_loader_spec.rb | ||
