Aman-Mittal commented on issue #213: URL: https://github.com/apache/fineract-backoffice-ui/issues/213#issuecomment-5158694178
Done and merged in #217. `authInterceptor` now attaches credentials and the tenant header only when the request is bound for the configured API. A relative URL is same-origin by construction; an absolute one is compared by origin, so a cross-origin API a deployment configured still authenticates, and nothing else does. The tenant header is withheld from foreign origins too, since it names the institution. Four unit tests cover it: no `Authorization` and no tenant header to a foreign origin, and both still present for relative and same-origin absolute requests. `npm run ga:check` reports this gate as passing. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
