Details
-
Fix
-
Status: Released (View Workflow)
-
Minor
-
Resolution: Fixed
-
2.9.0, 2.7.8, 2.8.4
-
None
-
None
Description
Current Situation
Currently the /configuration/login API endpoint returns the name of the default profile account in its response. This value is not used by the GUI and is considered a security weakness.
Desired Behavior
Remove the default profile account information from the API response.