From 760ed2a6946b12e07174a0ac5cce2f7e1140f0d2 Mon Sep 17 00:00:00 2001 From: Chris Lu Date: Wed, 14 Jan 2026 12:58:03 -0800 Subject: [PATCH] Clarify one-way S3 authentication transition in wiki --- S3-Credentials.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/S3-Credentials.md b/S3-Credentials.md index c3f1896..eb97203 100644 --- a/S3-Credentials.md +++ b/S3-Credentials.md @@ -339,7 +339,7 @@ As soon as **at least one identity** is configured using any method: ### Toggling Behavior - **Initial State**: If you start `weed mini` (or `weed s3`) with credentials, it starts in "Authentication Required" mode. -- **Dynamic Transition**: If you start `weed mini` without credentials (in "Allow-All" mode) and then add a user via the **Admin UI** or **weed shell**, the server will **automatically transition** to "Authentication Required" mode. All subsequent requests will require valid credentials. +- **Dynamic Transition (One-Way)**: If you start without credentials (in "Allow-All" mode) and then add any identity, the server will **automatically and permanently transition** to "Authentication Required" mode. Once enabled, authentication will remain required even if all credentials are later removed. ## Configuration Reloading