Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-16159

"Require user tokens for repository authentication" now enforced properly

    XMLWordPrintable

    Details

    • Story Points:
      0
    • Release Note:
      Yes
    • Notability:
      3

      Description

      When User token is enabled and the Require user tokens for repository authentication is also enabled, docker requests are still allowed to use plain text credentials instead of being forced to use user token credentials.

      The changes made by NEXUS-11231 seem to only affect Maven and Raw format repositories.

      Expected

      When Require user tokens for repository authentication is enabled, all non user-token credentials should be blocked for all repository formats.

        Attachments

          Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-23830 docker anonymous pull fails with 401 when user tokens are enabled

          • Major - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-18312 Docker download counts not working

          • Major - Major loss of function.
          • Closed
          relates

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-23765 Plain text login to docker group permitted despite user tokens being enabled

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. NEXUS-24803 align user token content protection for non-content requests

          • Major - Major loss of function.
          • New
          mentioned in

          Page Loading...

            Activity

              People

              Assignee:
              mpiggott Matthew Piggott
              Reporter:
              plynch Peter Lynch
              Last Updated By:
              Wes Wannemacher
              Team:
              NXRM - Operations/Groot
              Votes:
              2 Vote for this issue
              Watchers:
              10 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title