mirror of
https://github.com/kanidm/kanidm.git
synced 2025-02-23 12:37:00 +01:00
10ad183732
When an admin configured oauth2 custom claims during the creation it was not enforced that at least one value must be present. This led to an incorrect logic flaw in str_concat! which didn't handle the 0 case. This hardens str_concat! to prevent the thread crash by using itertools for the join instead, and it enforces stricter validation on the valueset to deny creation of empty claims. This fix has a low security impact as only an administrator or high level user can trigger this as a possible denial of service. Fixes #2680 Fixes #2681 |
||
|---|---|---|
| .. | ||
| core | ||
| daemon | ||
| lib | ||
| lib-macros | ||
| testkit | ||
| testkit-macros | ||
| web_ui | ||
| builder.sh | ||
| Dockerfile | ||