Project

General

Profile

Actions
Copy link

Bug #7657

closed

Remove default OAuth credentials

Added by Dominic Cleal about 10 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Shlomi Zadok
Category:
Security
Target version:
1.7.0
Difficulty:
Triaged:
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman/pull/1875
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

oauth_consumer_key and oauth_consumer_secret have default values in the codebase, which should be removed to require users to supply their own values.

Note that this only affects a source or basic package install, and OAuth is disabled anyway. The default installer run will randomise these passwords before enabling it.

Actions
Copy link
 #1

Updated by The Foreman Bot about 10 years ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/1875 added
  • Pull request deleted ()
Actions
Copy link
 #2

Updated by Shlomi Zadok about 10 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100
Actions
Copy link
 #3

Updated by Dominic Cleal about 10 years ago

  • Assignee set to Shlomi Zadok
  • Target version set to 1.7.2
Actions
Copy link

Also available in: Atom PDF