Skip to main content
atoti.SecurityConfig(
    *,
    basic_authentication: BasicAuthenticationConfig = BasicAuthenticationConfig(),
    client_certificate: ClientCertificateConfig | None = None,
    cors: CorsConfig | None = None,
    https: HttpsConfig | None = None,
    jwt: JwtConfig = JwtConfig(),
    login: LoginConfig | None = None,
    same_site: Literal[‘lax’, ‘none’, ‘strict’] = 'lax',
    sso: KerberosConfig | LdapConfig | OidcConfig | None = None,
)
The security config.
This feature is not part of the community edition: it needs to be unlocked.
This configures the parts of the security system that cannot be changed once the session is started.
See also: atoti.Session.security and atoti.tables.Tables.restrictions to continue configuring the security once the session is started.

​
Attributes

​
basic_authentication

Always enabled even if sso is not None to facilitate the authentication of service/technical users.
See also: BasicAuthenticationSecurity.

​
client_certificate

ClientCertificateConfig | None

​
cors

CorsConfig | None

​
https

HttpsConfig | None

​
jwt

JwtConfig

​
login

LoginConfig | None

​
same_site

The value to use for the SameSite attribute of the HTTP cookie sent by the session. See https://web.dev/samesite-cookies-explained for more information.
"none" requires the session to be served over HTTPS.

​
sso

The config to delegate authentication to a Single Sign-On provider.