Uploaded image for project: 'Red Hat 3scale API Management'
  1. Red Hat 3scale API Management
  2. THREESCALE-12325

Master admin portal signup form exposed and functional

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Blocker Blocker
    • None
    • 2.16.2 GA
    • System
    • False
    • Hide

      None

      Show
      None
    • False
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • Critical

      Current behaviour

      The master admin portal signup form is accessible at /signup and it is at least partially functional in that it allows a user to sign up and a new Tenant is created. From the tests performed on RHOAM in MGDAPI-7000 it seems the activation link generated has the wrong domain which means the user cannot complete the signup process. This is good as we do not want this functionality outside of SaaS.

      Expected behaviour

      The signup page should not be accessible unless explicitly configured by the user to be so. This presents an undesired behaviour being exposed publicly (or within the network the domain can be resolved) and Tenants being created but inaccessible.

              Unassigned Unassigned
              rhn-support-keprice Kevin Price
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: