YunoHost-Apps / vaultwarden_ynh

Open source password management solutions for YunoHost
https://bitwarden.com/
GNU General Public License v3.0
58 stars 18 forks source link

Fix API permission for clients #233

Closed tituspijean closed 1 year ago

tituspijean commented 1 year ago

I discovered that my Vaultwarden desktop client could not connect anymore. Changing the URL of the API from /identity/connect/token to only /identity fixed that.

We need to check if we don't expose sensitive endpoints doing that.

PR Status

Automatic tests

Automatic tests can be triggered on https://ci-apps-dev.yunohost.org/ after creating the PR, by commenting "!testme", "!gogogadgetoci" or "By the power of systemd, I invoke The Great App CI to test this Pull Request!". (N.B. : for this to work you need to be a member of the Yunohost-Apps organization)

tituspijean commented 1 year ago

!testme

yunohost-bot commented 1 year ago

:sunflower: Test Badge