Files
cal.diy/apps/web/public
Pedro Castro 9ae2381755 fix(auth): validate IdP authority before SAML account linking (#26005)
* fix(auth): validate IdP authority before SAML account linking

Adds verification that SAML IdP is authoritative for the email domain
before allowing account conversion

* fix(auth): deny by default on missing SAML tenant + optimize membership query

 - Block account conversion when tenant is missing (deny by default)
 - Replace JOIN + ILIKE with two indexed lookups for O(1) performance

* refactor(auth): apply data minimization to security logs
2025-12-20 17:45:18 +00:00
..
2022-04-15 08:54:09 +00:00
2022-07-28 13:58:26 -06:00
2023-05-22 21:53:37 +00:00
2022-09-06 16:58:16 -06:00
2023-09-05 19:56:02 +02:00
2022-02-10 14:22:45 -07:00
2022-02-10 14:22:45 -07:00
2022-02-10 14:22:45 -07:00
2022-02-18 10:33:18 -07:00
2023-11-28 14:52:53 +00:00
2022-02-10 14:22:45 -07:00
2022-02-10 14:22:45 -07:00
2024-04-17 11:09:11 -04:00
2023-04-12 23:10:23 -03:00