pepepper/fluxer
1
0 Fork 0
mirror of https://github.com/fluxerapp/fluxer synced 2026-10-19 05:55:34 +09:00
Code Issues Packages Projects Releases Wiki Activity

fix(sso): trust absent email_verified claim and relax auth code length limit (#1493)

Browse Source
This commit is contained in:
Mocha authored and GitHub committed 2026-07-27 01:51:42 +02:00
1 parent 09a825ce5b
commit b323701774
2 files changed
+3 -3
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

fluxer_api/src/api/auth/services/SsoService.ts
+1 -1
View File
@@ -224,7 +224,7 @@ function resolveEmailVerified({
if (values.includes(false)) { if (values.includes(false)) {
return false; return false;
} }
return values.includes(true); return values.length === 0 || values.includes(true);
} }
function isJsonWebKeySet(value: unknown): value is JSONWebKeySet { function isJsonWebKeySet(value: unknown): value is JSONWebKeySet {
packages/schema/src/domains/auth/AuthSchemas.ts
+2 -2
View File
@@ -260,8 +260,8 @@ export const SsoStartRequest = z.object({
export type SsoStartRequest = z.infer<typeof SsoStartRequest>; export type SsoStartRequest = z.infer<typeof SsoStartRequest>;
export const SsoCompleteRequest = z.object({ export const SsoCompleteRequest = z.object({
code: createStringType().describe('Authorization code from the SSO provider'), code: createStringType(1, 4096).describe('Authorization code from the SSO provider'),
state: createStringType().describe('State parameter for CSRF protection'), state: createStringType(1, 4096).describe('State parameter for CSRF protection'),
}); });
export type SsoCompleteRequest = z.infer<typeof SsoCompleteRequest>; export type SsoCompleteRequest = z.infer<typeof SsoCompleteRequest>;