Project

General

Profile

Actions

Bug #7657

closed

Remove default OAuth credentials

Added by Dominic Cleal over 9 years ago. Updated almost 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Security
Target version:
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

oauth_consumer_key and oauth_consumer_secret have default values in the codebase, which should be removed to require users to supply their own values.

Note that this only affects a source or basic package install, and OAuth is disabled anyway. The default installer run will randomise these passwords before enabling it.

Actions #1

Updated by The Foreman Bot over 9 years ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/1875 added
  • Pull request deleted ()
Actions #2

Updated by Shlomi Zadok over 9 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100
Actions #3

Updated by Dominic Cleal over 9 years ago

  • Assignee set to Shlomi Zadok
  • Target version set to 1.7.2
Actions

Also available in: Atom PDF