fix: admin role mapping grants only, revoke behind opt-in

Browse Source

SSO login for an existing admin whose token lacked the admin role was
silently demoting the account, locking admins out of the dashboard.
Missing admin role now leaves the flag alone unless
RevokeAdminWithoutRole is enabled.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

...

This commit is contained in:

Pascal Linxweiler

2026-07-13 14:44:07 +02:00

parent 606f14dfab

commit 7dc79bf003

8 changed files with 36 additions and 8 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

dist/oidc-auth_1.0.3.0.zip vendored Normal file

Binary file not shown.