Skip to content

Do not send auth header for SSO login requests

Daniel Gerhardt requested to merge do-not-send-auth-header-for-sso-login into master

The SSO endpoint uses the cookie for authentication with might otherwise be overriden with guest credentials.

Merge request reports