summaryrefslogtreecommitdiff
path: root/src/leap/bitmask/core/web
diff options
context:
space:
mode:
authorKali Kaneko (leap communications) <kali@leap.se>2017-01-17 17:43:08 +0100
committerKali Kaneko (leap communications) <kali@leap.se>2017-02-09 12:16:46 +0100
commita6b01b2df33e6d42faecbbea774ac97b3fc4491b (patch)
tree8c3c83a3d9804694807171822e2fd06699ab1501 /src/leap/bitmask/core/web
parent7b619614040ada4445d8bf92d77f4e05d6325669 (diff)
disable authentication for API
Diffstat (limited to 'src/leap/bitmask/core/web')
-rw-r--r--src/leap/bitmask/core/web/service.py12
1 files changed, 9 insertions, 3 deletions
diff --git a/src/leap/bitmask/core/web/service.py b/src/leap/bitmask/core/web/service.py
index 77e1c729..c1d839e8 100644
--- a/src/leap/bitmask/core/web/service.py
+++ b/src/leap/bitmask/core/web/service.py
@@ -92,11 +92,17 @@ class HTTPDispatcherService(service.Service):
jsapi = File(os.path.abspath(jspath))
api = Api(CommandDispatcher(self._core))
- protected_api = protectedResourceFactory(
- api, self._core.tokens, self.API_WHITELIST)
+ # protected_api = protectedResourceFactory(
+ # api, self._core.tokens, self.API_WHITELIST)
root = File(webdir)
- root.putChild(u'API', protected_api)
+
+ # FIXME -- switching off the protected api, due to
+ # https://0xacab.org/leap/bitmask-dev/issues/9
+ # root.putChild(u'API', protected_api)
+ # -------------------------------------------------
+
+ root.putChild(u'API', api)
if not HAS_WEB_UI:
root.putChild('bitmask.js', jsapi)