From 62ea8805e34d54a17d0749c5989a32f494e99a59 Mon Sep 17 00:00:00 2001
From: Stefano Alberto Russo <stefano.russo@gmail.com>
Date: Tue, 5 Apr 2022 17:37:21 +0200
Subject: [PATCH] Fixed default setting for OIDC_TOKEN_USE_BASIC_AUTH from True
 to False.

---
 services/webapp/code/rosetta/settings.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/webapp/code/rosetta/settings.py b/services/webapp/code/rosetta/settings.py
index b774e15..63a0410 100644
--- a/services/webapp/code/rosetta/settings.py
+++ b/services/webapp/code/rosetta/settings.py
@@ -263,7 +263,7 @@ if OIDC_RP_CLIENT_ID:
 
     # Optional
     OIDC_USE_NONCE =  booleanize(os.environ.get('OIDC_USE_NONCE', False))
-    OIDC_TOKEN_USE_BASIC_AUTH = booleanize(os.environ.get('OIDC_TOKEN_USE_BASIC_AUTH', True))
+    OIDC_TOKEN_USE_BASIC_AUTH = booleanize(os.environ.get('OIDC_TOKEN_USE_BASIC_AUTH', False))
     
     # Non-customizable stuff
     LOGIN_REDIRECT_URL = '/'
-- 
GitLab