Commit b4fd396
committed
Use custom uhd auth header for jwt
Use `X-UHD-AUTH` header for the JWT instead of `Authorization` header
- The Authorzation header is already being used for the API key which is
checked by the AWS load balancer, so commands with just the JWT are
rejected.
- Sending both headers means the ALB can verify the API key and send the
request on to Django which can then verify the JWT1 parent f4b769f commit b4fd396
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
100 | 100 | | |
101 | 101 | | |
102 | 102 | | |
103 | | - | |
| 103 | + | |
104 | 104 | | |
105 | 105 | | |
106 | 106 | | |
| |||
0 commit comments