gitea-admin/gh-christianlouis-dmarq
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

address backend security and test suggestions

Browse Source
This commit is contained in:
Christian Krakau-Louis
2026-05-18 16:44:06 +02:00
parent 8f7c41193f
commit b4191e956c
11 changed files with 320 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/app/core/config.py
+4 -5
View File
@@ -71,15 +71,14 @@ class Settings(BaseSettings):
# LOGTO_APP_SECRET: the Client Secret of the same application.
# LOGTO_REDIRECT_URI (optional): override the default callback URL.
# Defaults to <base_url>/api/v1/auth/callback.
# LOGTO_SKIP_SSL_VERIFY (optional): set to false to enable SSL certificate
# verification when connecting to the Logto OIDC endpoint.
# Defaults to true (verification disabled) to support
# self-signed certificates out of the box.
# LOGTO_SKIP_SSL_VERIFY (optional): set to true only when connecting to a
# self-hosted Logto endpoint with a self-signed certificate.
# Defaults to false so TLS certificates are verified.
LOGTO_ENDPOINT: Optional[str] = None
LOGTO_APP_ID: Optional[str] = None
LOGTO_APP_SECRET: Optional[str] = None
LOGTO_REDIRECT_URI: Optional[str] = None
LOGTO_SKIP_SSL_VERIFY: bool = True
LOGTO_SKIP_SSL_VERIFY: bool = False
@property
def logto_configured(self) -> bool: