<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hello,<div class=""><br class=""></div><div class="">so i was playing with the Shoot demo for iOS and connecting it to KC, a little research for a possible node.js adapter.</div><div class=""><br class=""></div><div class="">Anyway, i got everything working, i was able to perform the OAuth2 login, redirect back and upload a photo. </div><div class=""><br class=""></div><div class="">Then i went into the KC admin console thing, and disabled both the OAuth Client(shoot-third-party ) and the shoot-services, but when i then tried to upload, i was still successful.</div><div class=""><br class=""></div><div class="">i guess i was under the impression that once one or both of those things are disabled, the upload shouldn’t work.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">as i’m writing i saw this PR come through, <a href="https://github.com/aerogear/aerogear-ios-cookbook/pull/45" class="">https://github.com/aerogear/aerogear-ios-cookbook/pull/45</a>, not sure if this will solve this issue though</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">-Luke</div></body></html>