Skip to content

Fixes bug in which WebAuthContext added groups from the request environment

David Chandek-Stark requested to merge DDR-2124-anonymous-groups into release-1.2.0

although the user is not authenticated to the application.

The case is triggered in development and test/staging servers where users are required to authenticate to Shibboleth for access to the site, but are not required to login to the application.

Upgrading ddr-xenon to use ddr-core at this commit should resolve DDR-2124. @cl334

Merge request reports