Firstyear 10ad183732 [SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686) ... When an admin configured oauth2 custom claims during the creation it was not enforced that at least one value must be present. This led to an incorrect logic flaw in str_concat! which didn't handle the 0 case. This hardens str_concat! to prevent the thread crash by using itertools for the join instead, and it enforces stricter validation on the valueset to deny creation of empty claims. This fix has a low security impact as only an administrator or high level user can trigger this as a possible denial of service. Fixes #2680 Fixes #2681		2024-03-26 01:43:03 +00:00
..
benches	Adding a builtin class for all built-in things (#2603)	2024-03-06 01:33:14 +00:00
src	[SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)	2024-03-26 01:43:03 +00:00
build.rs	20240221 2489 cleanup api v1 (#2573)	2024-02-27 09:25:02 +00:00
Cargo.toml	[SECURITY: LOW] Administrator triggered thread crash in oauth2 claim maps #2686 (#2686)	2024-03-26 01:43:03 +00:00