mirror of
https://github.com/kanidm/kanidm.git
synced 2025-02-23 12:37:00 +01:00
Administrators will sometimes configure oauth2 clients with `idm_all_accounts` as an allowed scope group. Despite anonymous being *unable* to interact with oauth2, this still allowed oauth2 clients to be read by anonymous in this configuration. For some users, this may be considered a public info disclosure. |
||
---|---|---|
.. | ||
core | ||
daemon | ||
lib | ||
lib-macros | ||
testkit | ||
testkit-macros | ||
builder.sh | ||
Dockerfile |