apache / apache/cloudstack

Global setting "oauth2.plugins.exclude" value is not enforced

Open
#13,859 1 comment 0 reactions 1 assignee Claimed by @Damans227 View on GitHub
bug
Dominant language
Java
Stars
3.1k
Forks
1.4k
Avg merge
6d 19h
Merged PRs (30d)
32

Description

### problem

ACS 4.22

### versions

ACS 4.22

### The steps to reproduce the bug

1. Register a oauth configuration for google provider
2. Authentication with google auth succeeds
3. Update the value of "oauth2.plugins.exclude" to google
4. Authentication with google auth still succeeds
5. Restart the management service ( service cloudstack-management restart)
6. Authentication with google still succeeds

oauth2.plugins= google,github
oauth2.plugins.exclude=google
...

### What to do about it?

Authentication with oauth provider should fail if its mentioned in the "oauth2.plugins.exclude"

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.