j3d1/webvirtcloud
1
0
Fork 0
mirror of https://github.com/retspen/webvirtcloud synced 2026-11-08 11:16:47 +00:00
Code Issues Projects Releases Wiki Activity

fix(settings): remove RemoteUserMiddleware, which no backend uses

Browse source 
No RemoteUserBackend is configured, so the middleware never logged
anyone in: it only ran on every request and read as if the panel trusted
a REMOTE_USER header.
This commit is contained in:
catborise 2026-11-06 11:01:43 +03:00
parent 97e107ce14
commit 0ccdb2adb7
1 changed files with 0 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
webvirtcloud/settings.py.template
View file

@ -99,7 +99,6 @@ MIDDLEWARE = [
"django_otp.middleware.OTPMiddleware",
"django.contrib.auth.middleware.LoginRequiredMiddleware",
"accounts.middleware.ForcePasswordChangeMiddleware",
"django.contrib.auth.middleware.RemoteUserMiddleware",
"django.contrib.messages.middleware.MessageMiddleware",
"django.middleware.clickjacking.XFrameOptionsMiddleware",
"webvirtcloud.middleware.ContentSecurityPolicyMiddleware",