with enabled oauth2 api is not closed

[broblond]

Hi Maxim)
Im integrate allure-server to my k8s with adfs security settings. UI - works good after auth. But api part of server - open.
I don’t really understand the meaning of this decision and regard it more as a bug. Because you can literally do everything through the API. Can you please fix it. Thank you

[chessracer]

One option here is to enable both basic auth and oauth. I'm using this successfully; ui login works well with google oauth, and the api is protected by the basic auth credentials.