bellycard/napa

concept of HEADER_PASSWORD should be optional - and off by default

Closed this issue · 6 comments

craigulliott commented

It's frustrating if you cant write the hello world of services without understanding the password concept.

Even when you put

HEADER_PASSWORD=

in your .env file you still get an error.

I'd suggest we have HEADER_PASSWORD= as a default in the .env file and that means no password is required. That'll act as a good reminder for people to set one, and learn how it works. A comment in that file to documentation online would be good too.,

craigulliott commented

also... any this is just personal opinion. I hate having to add things to the headers. The world I play in is a browser, and parameters seem fine for almost everything. So lets consider accepting headers or parameters by default?

umtrey commented

Either that, or by default don't include the middleware for authentication.

jdoconnor commented

I like treys better
On Oct 10, 2014 4:07 PM, "Trey Springer" notifications@github.com wrote:

Either that, or by default don't include the middleware for authentication.

—
Reply to this email directly or view it on GitHub
#152 (comment).

craigulliott commented

Cool - lets do that then.

Should we also make Coors on by default?

On Fri, Oct 10, 2014 at 4:12 PM, Jay OConnor notifications@github.com
wrote:

I like treys better
On Oct 10, 2014 4:07 PM, "Trey Springer" notifications@github.com
wrote:

Either that, or by default don't include the middleware for
authentication.

—
Reply to this email directly or view it on GitHub
#152 (comment).

—
Reply to this email directly or view it on GitHub
#152 (comment).

Craig Ulliott
Technologist and Entrepreneur

(267) 441-8233

craigulliott commented

Cool - lets do that then.

Should we also make Cors on by default?

On Fri, Oct 10, 2014 at 4:12 PM, Jay OConnor notifications@github.com
wrote:

I like treys better
On Oct 10, 2014 4:07 PM, "Trey Springer" notifications@github.com
wrote:

Either that, or by default don't include the middleware for
authentication.

—
Reply to this email directly or view it on GitHub
#152 (comment).

—
Reply to this email directly or view it on GitHub
#152 (comment).

Craig Ulliott
Technologist and Entrepreneur

(267) 441-8233

jdoconnor commented

I can't see a good reason for having it on by default, as we don't need it.