LPS-27174 Fix logic so that only localhost can bypass auth token by d…

…efault, this follows existing ".hosts.allowed" pattern
shuyangzhou · Jun 1, 2012 · f708e8a · f708e8a
1 parent dfcb86b
commit f708e8a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/portal-impl/src/portal.properties b/portal-impl/src/portal.properties
@@ -5735,7 +5735,7 @@
     # any IP to access this servlet. SERVER_IP will be replaced with the IP of
     # the host server.
     #
-    json.service.auth.token.hosts.allowed=
+    json.service.auth.token.hosts.allowed=127.0.0.1,SERVER_IP
 
     #
     # Input a list of comma delimited class names that cannot be invoked via