You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Changed
Discovery endpoints (/.cratis/commands, /.cratis/queries, /.cratis/users, /.cratis/tenants and /.cratis/identity-details/schema) were anonymous in every environment; they are now anonymous in Development and require authentication elsewhere by default, using the host's IHostEnvironment. Hosts without authentication leave them unmapped and log a warning once per host; explicitly requiring authentication fails startup. Keep the previous behavior with builder.AddCratisArc(options => options.Introspection.RequireAuthentication = false); or Cratis:Arc:Introspection:RequireAuthentication=false. RequireAuthentication remains a bool; leaving it unset selects the environment default, and Roles implies authentication. See Migrating to secure defaults and supported configuration binding. (#2834)