Basic authentication for password is not disable in Enhanced Security Level

Issue #41 resolved
Francois Miquel created an issue

Hello,

I want to report a bug regarding the “Enhanced Security level” which is supposed to forbid usage of password.

Our instance is currently configured with this level but password is still accepted.

Could you investigate as it is allowing bruteforce of passwords and defeating the purpose of this app.

Thank you,

Comments (3)

  1. Log in to comment