vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Return a 401 when doing a login with bad credentials

Browse source
This commit is contained in:
Jake Moshenko 2015-11-20 18:35:02 -05:00
parent ec396226c3
commit 0c44949017
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
endpoints/v2/v2auth.py
View file

@ -103,6 +103,10 @@ def generate_registry_jwt():
'actions': actions, 'actions': actions,
}) })
elif user is None and token is None:
# In this case, we are doing an auth flow, and it's not an anonymous pull
return abort(401)
token_data = { token_data = {
'iss': app.config['JWT_AUTH_TOKEN_ISSUER'], 'iss': app.config['JWT_AUTH_TOKEN_ISSUER'],
'aud': audience_param, 'aud': audience_param,