diff --git a/netbox/netbox/graphql/views.py b/netbox/netbox/graphql/views.py index 23827c9c4..010cef1d3 100644 --- a/netbox/netbox/graphql/views.py +++ b/netbox/netbox/graphql/views.py @@ -36,6 +36,7 @@ class NetBoxGraphQLView(GraphQLView): # Enforce LOGIN_REQUIRED if settings.LOGIN_REQUIRED and not request.user.is_authenticated: - return redirect_to_login(reverse('graphql')) + # return redirect_to_login(reverse('graphql')) + return HttpResponseForbidden("No credentials provided.") return super().dispatch(request, *args, **kwargs) diff --git a/netbox/netbox/tests/test_graphql.py b/netbox/netbox/tests/test_graphql.py index 2cf9ee87b..5bf9c4abb 100644 --- a/netbox/netbox/tests/test_graphql.py +++ b/netbox/netbox/tests/test_graphql.py @@ -33,4 +33,5 @@ class GraphQLTestCase(TestCase): self.client.logout() response = self.client.get(url, **header) with disable_warnings('django.request'): - self.assertHttpStatus(response, 302) # Redirect to login page + # self.assertHttpStatus(response, 302) # Redirect to login page + self.assertHttpStatus(response, 403) # Redirect to login page