Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
Co-authored-by: Sergey Beryozkin <[email protected]>

Sergey's review

Signed-off-by: Michal Maléř <[email protected]>
  • Loading branch information
MichalMaler committed Dec 16, 2023
1 parent 6817d40 commit 42750ed
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -384,7 +384,7 @@ s| @DenyAll | Specifies that no security roles are allowed to invoke the specifi
s| @PermitAll | Specifies that all security roles are allowed to invoke the specified methods.

`@PermitAll` lets everybody in, even without authentication.
s| @RolesAllowed | Specifies the list of security roles authorized to access methods in an application.
s| @RolesAllowed | Specifies the list of security roles allowed to access methods in an application.

As an equivalent to `@RolesAllowed("**")`, {project-name} also provides the `io.quarkus.security.Authenticated` annotation that permits any authenticated user to access the resource.
|===
Expand Down
4 changes: 2 additions & 2 deletions docs/src/main/asciidoc/security-basic-authentication.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -11,11 +11,11 @@ include::_attributes.adoc[]
:topics: security,authentication,basic-authentication,http
:extensions: io.quarkus:quarkus-vertx-http,io.quarkus:quarkus-elytron-security-jdbc,io.quarkus:quarkus-elytron-security-ldap,io.quarkus:quarkus-security-jpa-reactive

HTTP Basic authentication is a low-resource method for enforcing access controls to web resources.
HTTP Basic authentication is one of the least resource-demanding techniques that enforce access controls to web resources.
You can secure your Quarkus application endpoints by using HTTP Basic authentication.
Quarkus includes a built-in authentication mechanism for Basic authentication.

Basic authentication operates through fields in the HTTP header and does not rely on HTTP cookies, session identifiers, or login pages.
Basic authentication uses fields in the HTTP header and does not rely on HTTP cookies, session identifiers, or login pages.

== Authorization header

Expand Down

0 comments on commit 42750ed

Please sign in to comment.