barbercollie/tinyauth
1
0
Fork 1
mirror of https://github.com/steveiliop56/tinyauth.git synced 2026-07-17 15:31:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: abstain when OAuth whitelist is empty (#1010)

Browse Source 
Co-authored-by: wwhsaber <wwhsaber@foxmail.com>
This commit is contained in:
wwhsaber
2026-07-16 19:23:07 +08:00
committed by GitHub
parent 84117ce109
commit 1165c91fcc
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/service/access_controls_rules.go
+5
View File
@@ -43,6 +43,11 @@ func (rule *UserAllowedRule) Evaluate(ctx *ACLContext) Effect {
rule.Log.App.Debug().Msg("User is an OAuth user, checking OAuth whitelist")
match, err := utils.CheckFilter(ctx.ACLs.OAuth.Whitelist, ctx.UserContext.OAuth.Email)
if err != nil {
// Empty whitelist means "not configured" — let OAuth group rules decide.
if err == utils.ErrFilterEmpty {
rule.Log.App.Debug().Msg("OAuth whitelist is empty, abstaining")
return EffectAbstain
}
rule.Log.App.Warn().Err(err).Str("item", ctx.UserContext.OAuth.Email).Msg("Invalid entry in OAuth whitelist")
return EffectDeny
}