Github user K0zka commented on the pull request:
https://github.com/apache/cloudstack/pull/961#issuecomment-150164133
Hi Daan,
I have verified the result with curl -v, therefore manual verification. It
would be nice to have automatic test to verify that unauthenticated users can
not create session in CS whatever they do. One should get a session with login
only.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---