Differences

This shows you the differences between two versions of the page.

--- blocks:server_configuration_file [2025-11-12 09:13] – Note for spotSnap added in 7.4 admin
+++ blocks:server_configuration_file [2025-12-17 14:00] (current) – [Top level server item] admin
@@ Line 134: / Line 134: @@
 Specifies advanced authentication and authorization options. The settings shown above correspond to the defaults if no auth section is provided. In most cases, you don't need to specify these settings. If you specify the //internalForm// authorization method, a "Log Out" command will be added to Blocks' Page menu, allowing you to explicitly log out.   The OidcClient setting allows for integration with single-sign-on systems such as [[blocks:sso:adfs|Active Directory]] or [[blocks:sso:okta|OKTA]].
-:!: **IMPORTANT**: While the //internalForm// method provides log-out functionality, it also sends all authoriztion credentials, including your password, as clear text. The default //internalDigest// method, while not providing any log-out functionality, avoids sending your password as clear text. When using Blocks on publicly accessible networks, you're strongly advised to use and only allow [[blocks:server:nginx|encrypted connection#https_domain_name_and_certificate]] (HTTPS) for all editing operations.
+:!: **IMPORTANT**: While the //internalForm// method provides log-out functionality, it also sends authentication credentials, including your password, as clear text if used under HTTP. The default //internalDigest// method, while not providing any log-out functionality, avoids sending your password as clear text. When using Blocks on a publicly accessible network, you're strongly advised to use and only allow [[blocks:server:nginx#https_domain_name_and_certificate|encrypted HTTPS connection]] for all editing operations.
 ==== Top level tftp item ====
 Specifies options for the built-in TFTP-server. This is intended for [[blocks:server:pxe-boot|network booting]] of PIXILAB Player. It accepts the following options: