ralovely
commented
9 years ago - There is a problem with how the
snapsecret_authorisation_settingis used: an envar is always passed as a string, but code expects a symbol. Either the setting has to be converted to_sym at some point, or code needs to expect a string. - In
:limitedmode, when I’m not authorised to send a secret (i.e. not to the authorised_domain), there need to be a helpful error or flash message when we render the new view.
mikel
Removes the old authorisation settings (snapsecret_domains_allowed_to_create_secrets & snapsecret_domains_allowed_to_receive_secrets), replaces with two more that are a bit more flexible (snapsecret_authorisation_setting & snapsecret_authorised_domain). An explanation of how the settings work is in the config/initializer/snapsecret.rb file.