With client auth, request for XSRF token should not carry admin username/password, for two reasons: 1. username/password may not exist in config 2. backend treats these credentials as authentication and ignores the desired principal identity Change-Id: I35af9536018196959297dcad6b11b98d0681d625
23 KiB
23 KiB