3scale/issues-test — Issue #258: Auth settings question
Author: HakubJozak
Created: 2012-02-10 17:39:18+00:00
State: open
Labels: chore

Question to you tiago: right now we have 3 auth modes "single user_key" (which is connect), "app_id/app_key" and "oauth". THe default for enterprise is the second. However in that mode, the default is NOT to create a "key" straight away. This always worried me because it means that if someone sends just the app_id they would be authenticated. Is that correct?

If it is correct should the default not be create a single key on app creation? (and not allow the last key to be deleted?).

Tasks

https://www.pivotaltracker.com/story/show/12830497