search

The-OAG-Development-Project / Application-Gateway

OWASP Application Gateway is an HTTP proxy that handles Oauth2 authentication and session management
https://owasp.org/www-project-application-gateway/
Apache License 2.0
83 stars 4 forks source link

Change to secure HTTPS default configuration (instead of http) #150

Open Padi-owasp opened 2 weeks ago

Padi-owasp commented 2 weeks ago

Currently we deliver with a configuration using http. while this is simpler to support (i.e. no cert deployment/creation), this is not a secure default and should be changed.

(Make default config TLS (incl. JWKS endpoint and add truststores to config))