fix(sso): trust absent email_verified claim and relax auth code length limit (#1493)

This commit is contained in:
Mocha authored and GitHub committed 2026-07-27 01:51:42 +02:00
1 parent 09a825ce5b
commit b323701774
2 files changed
+3 -3

No files matched your search

@@ -224,7 +224,7 @@ function resolveEmailVerified({
if (values.includes(false)) {
return false;
}
return values.includes(true);
return values.length === 0 || values.includes(true);
}
function isJsonWebKeySet(value: unknown): value is JSONWebKeySet {