s-kostyuk / everpl

The Everthing Platfrom source code
https://everpl.readthedocs.io/
MIT License
0 stars 1 forks source link

Support of insecure mode #15

Open s-kostyuk opened 7 years ago

s-kostyuk commented 7 years ago

This pull request introduces a special mode of the platform: an insecure one.

In this mode token checking is disabled completely, so that all users and all clients are able to do almost everything in system. The only exception is user management: only root (i.e. the first created user) is allowed to create and delete users in the system. To do so, root user must authentificate, receive an access token and then pass it to 'create_user' or 'remove_user' procude for user creation and removal correspondingly.