http/preprocessors: update outdated Basic Auth comment (#982)

getodk · Sep 13, 2023 · a0c83d8 · a0c83d8
1 parent 2cf7c27
commit a0c83d8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/http/preprocessors.js b/lib/http/preprocessors.js
@@ -67,7 +67,7 @@ const authHandler = ({ Sessions, Users, Auth, bcrypt }, context) => {
     // auth by the bearer token we found:
     return authBySessionToken(authHeader.substring(7), () => reject(Problem.user.authenticationFailed()));
 
-  // Basic Auth, which is allowed over HTTPS only:
+  // Basic Auth, which is allowed under certain circumstances:
   } else if (isPresent(authHeader) && authHeader.startsWith('Basic ')) {
     if (oidc.isEnabled()) return reject(Problem.user.basicAuthNotSupportedWhenOidcEnabled());