Skip to content

1.2.0

Compare
Choose a tag to compare
@gary-archer gary-archer released this 07 Oct 16:01
· 21 commits to main since this release
55e4956

Fixed an issue where the module was checking for an origin header for GET requests.
When the module is running in the web origin's domain, the origin header is only sent for data changing commands.
Therefore when oauth_proxy_cors_enabled =off is configured, the origin header is only validated for data changing commands.