diff options
Diffstat (limited to 'services/api/rest_api.php')
| -rw-r--r-- | services/api/rest_api.php | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/services/api/rest_api.php b/services/api/rest_api.php index 4d3e39aaa..1ef8b729e 100644 --- a/services/api/rest_api.php +++ b/services/api/rest_api.php @@ -29,8 +29,10 @@ if ((isset($CONFIG->disable_api)) && ($CONFIG->disable_api == true)) { // plugins should return true to control what API and user authentication handlers are registered if (trigger_plugin_hook('rest', 'init', null, false) == false) { - // check session - this usually means a REST call from a web browser - register_pam_handler('pam_auth_session'); + // for testing from a web browser, you can use the session PAM + // do not use for production sites!! + //register_pam_handler('pam_auth_session'); + // user token can also be used for user authentication register_pam_handler('pam_auth_usertoken'); |