Skip to content

Commit feff385

Browse files
Updated security settings for new origin setting and updated login page message to use translate function
1 parent 5533b5a commit feff385

File tree

2 files changed

+18
-2
lines changed

2 files changed

+18
-2
lines changed

docs/reference/configuration-reference/security-settings.md

Lines changed: 15 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,21 @@ xpack.security.authc.providers.<provider-type>.<provider-name>.icon ![logo cloud
7575
: Custom icon for the provider entry displayed on the Login Selector UI.
7676

7777
xpack.security.authc.providers.<provider-type>.<provider-name>.origin ![logo cloud](https://doc-icons.s3.us-east-2.amazonaws.com/logo_cloud.svg "Supported on {{ech}}")
78-
: TODO
78+
: Specifies a list of allowed origins for authentication requests initiated from the UI. Each origin must be a valid URI and is matched against the browser’s `origin` header when fulfilling an authentication request. Providers not matching the browser's location do not appear in the UI. By default, requests are not restricted to specific origins.
79+
80+
For example:
81+
82+
```yaml
83+
xpack.security.authc:
84+
providers:
85+
basic.basic1:
86+
origin: [http://localhost:5601, http://127.0.0.1:5601]
87+
...
88+
89+
saml.saml1:
90+
origin: https://elastic.co
91+
...
92+
```
7993

8094
xpack.security.authc.providers.<provider-type>.<provider-name>.showInSelector ![logo cloud](https://doc-icons.s3.us-east-2.amazonaws.com/logo_cloud.svg "Supported on {{ech}}")
8195
: Flag that indicates if the provider should have an entry on the Login Selector UI. Setting this to `false` doesn’t remove the provider from the authentication chain.

x-pack/platform/plugins/shared/security/public/authentication/login/components/login_form/login_form.tsx

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -173,7 +173,9 @@ export class LoginForm extends Component<LoginFormProps, State> {
173173
(this.availableProviders.length === 0
174174
? {
175175
type: MessageType.Danger,
176-
content: 'No authentication providers have been configured for this domain.',
176+
content: i18n.translate('xpack.security.noAuthProvidersForDomain', {
177+
defaultMessage: 'No authentication providers have been configured for this domain.',
178+
}),
177179
}
178180
: { type: MessageType.None }),
179181
mode,

0 commit comments

Comments
 (0)