Page MenuHomePhorge

Disable unauthenticated access
ClosedPublic

Authored by mollekopf on Jan 14 2023, 11:25 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Mar 25, 1:41 AM
Unknown Object (File)
Feb 19 2024, 2:33 PM
Unknown Object (File)
Feb 10 2024, 8:12 AM
Unknown Object (File)
Feb 4 2024, 8:14 PM
Unknown Object (File)
Feb 4 2024, 7:47 PM
Unknown Object (File)
Jan 24 2024, 4:57 AM
Unknown Object (File)
Jan 22 2024, 7:41 PM
Unknown Object (File)
Jan 19 2024, 10:31 AM
Subscribers

Details

Summary

The WWW-Authenticate header was not returned on an unauthenticated
propfind, but thunderbird relies on that.

I believe it's basically because in Sabre\DAVACL\Plugin::beforeMethod,
nodeExists is called, which ultimately attempts to list calendars in the
backend. This cannot work without some form of proxy authorization.

This likely broke in 28bbce1c30abada11d0e1d49094c120ff1e3084c of the
sabre dav repo (where this unauthenticated access was introduced and
enabled by default).

Diff Detail

Repository
rI iRony
Lint
Lint Not Applicable
Unit
Tests Not Applicable