mirror of
https://github.com/authelia/authelia.git
synced 2026-10-28 09:34:52 +08:00
James Elliott
fff1b984f7
The authz endpoints now use the Sec-Fetch-Mode and Sec-Fetch-Dest headers to decide whether a request is a top-level navigation, falling back to the X-Requested-With and Accept headers when they are absent. Requests made with fetch, subresource requests, websockets, and iframe navigations now receive a 401 with the Location header instead of a redirect the web application silently follows. All authz responses also include the Cache-Control no-store and Pragma no-cache headers, and the Envoy, Istio, and Envoy Gateway integration docs forward the headers required for detection.
The Authelia website / documentation source.
Viewing the Documentation
This documentation is only intended to be viewed via the website www.authelia.com. Some elements will not render on GitHub, and as such, the markdown is not the official documentation, just a partial representation of it. representation of it.
Contributing
See the Documentation Contributing Guide for more information.