alopresto commented on issue #4099: NIFI-7170: Add option to disable anonymous 
authentication
URL: https://github.com/apache/nifi/pull/4099#issuecomment-612962685
 
 
   Matt, can you explain in what scenario(s) a user would be able to 
authenticate as `anonymous`? My understanding is there is one case (after this 
PR is merged) -- when a user request provides no credentials _AND_ the NiFi 
admin has explicitly enabled anonymous authentication. Is there any scenario I 
am not aware of? This should be independent of whether the request is then 
proxied by a trusted source. 

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services

Reply via email to