view core/modules/basic_auth/basic_auth.services.yml @ 13:5fb285c0d0e3

Update Drupal core to 8.4.7 via Composer. Security update; I *think* we've
been lucky to get away with this so far, as we don't support self-registration
which seems to be used by the so-called "drupalgeddon 2" attack that 8.4.5
was vulnerable to.

services:
  basic_auth.authentication.basic_auth:
    class: Drupal\basic_auth\Authentication\Provider\BasicAuth
    arguments: ['@config.factory', '@user.auth', '@flood', '@entity.manager']
    tags:
      - { name: authentication_provider, provider_id: 'basic_auth', priority: 100 }
  basic_auth.page_cache_request_policy.disallow_basic_auth_requests:
      class: Drupal\basic_auth\PageCache\DisallowBasicAuthRequests
      public: false
      tags:
        - { name: page_cache_request_policy }