Security improvements
WXM-16519
See
| Jira Legacy | ||||||
|---|---|---|---|---|---|---|
|
| Jira Legacy | ||||||
|---|---|---|---|---|---|---|
|
We strongly recommend to update your .wediaportalrc file in order to add 2 new keys :
| Code Block |
|---|
{
"default_user_object": "restapiapp", // represents the object that should be used for the REST application while user is not connected
"default_user_id": "1" // represents the id of that object that should be used for the REST application while user is not connected
} |
Having those 2 keys allows us to initiate a server session directly in the JSP if the current one is not suitable. It becomes therefore useless to send the credentials in the rendered HTML.
Note that providing the app name, key and secret is still required when you are working in development mode (localhsot:9000)
| Warning |
|---|
Due to security restriction, all users that need to have access to the back-office MUST have a rule for BO access set up in the security domain “Applications”, like this example :
|
Translations by DeepL
Translation by DeepL is now enabled by default in the Starter Kit.
...