search

Stormbase / django-otp-webauthn

Passkey support for Django. Currently in early stages of development and not ready for production use!
BSD 3-Clause "New" or "Revised" License
10 stars 2 forks source link

Define permission class for API views #19

Closed nijel closed 1 day ago

nijel commented 1 month ago

The code was relying on default AllowAny, but the default can be changed in the settings, thus breaking the authentication ceremony.

On the other side, the registration ceremony needs authenticated user, so the permission class states that now.

Stormheg commented 1 day ago

Thanks!