NeoAnd/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2025-07-28 19:36:26 -06:00
Code Issues Actions 8 Packages Projects Releases Wiki Activity

Remove skipsso backdoor

Browse Source
This commit is contained in:
Brian Tiemann 2025-03-17 10:43:58 -04:00
parent a5ebce5e36
commit 6ceceb5c58
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/configuration/security.md
View File

@ -190,7 +190,7 @@ The lifetime (in seconds) of the authentication cookie issued to a NetBox user u
Default: False Default: False
Option to hide the login form when only SSO authentication is in use. Appending `skipsso` as GET parameter shows the login form in case there is a problem with the SSO provider. Option to hide the login form when only SSO authentication is in use.
--- ---

2
netbox/account/views.py
View File

@ -89,7 +89,7 @@ class LoginView(View):
if request.user.is_authenticated: if request.user.is_authenticated:
logger = logging.getLogger('netbox.auth.login') logger = logging.getLogger('netbox.auth.login')
return self.redirect_to_next(request, logger) return self.redirect_to_next(request, logger)
login_form_hidden = settings.LOGIN_FORM_HIDDEN and "skipsso" not in request.GET login_form_hidden = settings.LOGIN_FORM_HIDDEN
return render(request, self.template_name, { return render(request, self.template_name, {
'form': form, 'form': form,