so i was playing with the Shoot demo for iOS and connecting it to KC, a little  research for a possible node.js adapter.

Anyway,  i got everything working,  i was able to perform the OAuth2 login, redirect back and upload a photo.  

Then i went into the KC admin console thing,  and disabled both the OAuth Client(shoot-third-party ) and the shoot-services,  but when i then tried to upload,  i was still successful.

i guess i was under the impression that once one or both of those things are disabled,  the upload shouldn’t work.

as i’m writing i saw this PR come through,  https://github.com/aerogear/aerogear-ios-cookbook/pull/45,  not sure if this will solve this issue though

-Luke