Skip to content

Unauthenticated users can access Cryptpad instance #20

@js-ddev

Description

@js-ddev

Test with the OpenDesk project deployment, on Kubernetes cluster with NextCloud sync, and OpenID authentication.

Step to reproduce:

  • Log to the platform, access a diagram file on NextCloud
  • copy the URL of the diagram and open it in a private window
  • Expected result: unregistered user will have credentials required
  • Current result: unregistered user can access and download the diagram:

image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions