Manuel RaynaudandGitHub 336d530014 🛂(backend) remove unused default authentication backend ...

The authentication backend
mozilla_django_oidc.contrib.drf.OIDCAuthentication
is present in the default authentication classes for the REST_FRAMEWORK
settings. This backend should not be used by our application and can
lead to the usage of our main api with an access_token instead of the
cookie session.
We need to override the drf SessionAuthentication backend to implement
the authenticate_header method. Without this, a 403 status code is
returned, but it is not valid. It must a be 401

2026-07-03 13:18:51 +00:00

..

__init__.py

✨(backend) add server-to-server API endpoint to create documents

2024-12-12 14:01:46 +01:00

backends.py

🛂(backend) remove unused default authentication backend

2026-07-03 13:18:51 +00:00