This commit is contained in:
Unrud 2017-06-21 09:49:01 +02:00
parent 68184858b4
commit b78b0f56cc

View File

@ -28,10 +28,11 @@ This release is compatible with version 2.0.0.
* Rights plugins can decide if access to an item is granted explicitly * Rights plugins can decide if access to an item is granted explicitly
* Respond with 403 instead of 404 for principal collections of non-existing * Respond with 403 instead of 404 for principal collections of non-existing
users when ``owner_only`` plugin is used (information leakage) users when ``owner_only`` plugin is used (information leakage)
* Authentication plugins can provide login and password from environment * Authentication plugins can provide the login and password from the
* new ``remote_user`` plugin, that gets login from the ``REMOTE_USER`` environment
* new ``remote_user`` plugin, that gets the login from the ``REMOTE_USER``
environment variable (for WSGI server) environment variable (for WSGI server)
* new ``http_x_remote_user`` plugin, that gets login from the * new ``http_x_remote_user`` plugin, that gets the login from the
``X-Remote-User`` HTTP header (for reverse proxies) ``X-Remote-User`` HTTP header (for reverse proxies)