- Issue created by @Mingsong
- Merge request !37Issue #3462268 by Mingsong: Drupal login via POST bypass Drupal local login restriction → (Open) created by Mingsong
- Status changed to Needs review
about 2 months ago 8:19am 18 July 2024
The setting of 'Allow authentication with local Drupal accounts' signifies whether a Drupal local account can login without SSO.
Currently, this setting working well with the user login route but not with the user login http route, which is used for login via a API request, such as REST API.
curl --header "Content-type: application/json" --request POST \
--data '{"name":"user name", "pass":"password"}' \
http://[yourdomain]/user/login?_format=json
Add the 'user.login.http' route into the checking list of a login attempt.
Needs review
4.0
Code