Branch: refs/heads/2.1.0
Home:
https://github.com/tribe29/checkmk
Commit: ba4fd1e02ec3eefce4e0ecb8825a1d154d6879d5
https://github.com/tribe29/checkmk/commit/ba4fd1e02ec3eefce4e0ecb8825a1d154…
Author: Lars Michelsen <lm(a)tribe29.com>
Date: 2022-03-07 (Mon, 07 Mar 2022)
Changed paths:
A .werks/13638
M cmk/gui/wsgi/applications/rest_api.py
Log Message:
-----------
13638 FIX REST API: Two-factor protected accounts may not access API
The REST API authentication was not handling the new two-factor authentication.
Since the authentication with the security key and one time tokens is not
usable with the API, we now completely block access to the REST API for those
user accounts.
If you have your personal account protected with the two-factor authentication
and want to use the REST API, you may create a dedicated (automation) account
for that.
CMK-9898
Change-Id: I4d9bd48eb6a7afb011e8bb968080806ddf217715