mirror of
https://github.com/discourse/discourse.git
synced 2026-08-11 02:59:07 +08:00
17e4bb4109DiscourseConnect verified SSO payload signatures with whatever `discourse_connect_secret` was configured, including an empty string, so an instance with DiscourseConnect enabled but no secret set did not fail safely. `DiscourseConnectBase#parse` now fails when the effective secret is blank, and `EnableSsoValidator` refuses to enable DiscourseConnect unless a secret of at least 10 characters is set. |
||
|---|---|---|
| .. | ||
| reports | ||
| has_post_upload_references_spec.rb | ||
| reviewable_action_builder_spec.rb | ||
