Skip to content

Conversation

@BraunMatthias
Copy link
Contributor

No description provided.

Copy link
Collaborator

@finkmanAtSap finkmanAtSap left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I did not do an in-depth review but I found some things while skimming through

@BraunMatthias BraunMatthias force-pushed the revised-security-guide branch 2 times, most recently from bfad258 to cb794d1 Compare November 25, 2025 11:18
@chgeo chgeo marked this pull request as draft November 26, 2025 09:07
</div>

<div class="node">
TODO
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think disabling auth is valid for Node.js ...

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is there no way to fully overrule?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am not aware of a way to disable just authentication without busting authorization in the process and I am uncertain about how the service mesh would replace the functionality.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we have a dummy auth strategy

BraunMatthias and others added 8 commits December 19, 2025 16:59
Co-authored-by: Paul <paul.erlenwein@gmail.com>
Co-authored-by: Paul <paul.erlenwein@gmail.com>
Co-authored-by: Paul <paul.erlenwein@gmail.com>
Co-authored-by: Paul <paul.erlenwein@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants