Closed nijel closed 1 day ago
The code was relying on default AllowAny, but the default can be changed in the settings, thus breaking the authentication ceremony.
On the other side, the registration ceremony needs authenticated user, so the permission class states that now.
Thanks!
The code was relying on default AllowAny, but the default can be changed in the settings, thus breaking the authentication ceremony.
On the other side, the registration ceremony needs authenticated user, so the permission class states that now.