Global setting "oauth2.plugins.exclude" value is not enforced
Đang mở
bug
- Ngôn ngữ chính
- Java
- Star
- 3.1k
- Fork
- 1.4k
- Merge trung bình
- 6 ngày 19 giờ
- Pull request đã merge (30 ngày)
- 32
Mô tả
### problem
ACS 4.22
### versions
ACS 4.22
### The steps to reproduce the bug
1. Register a oauth configuration for google provider
2. Authentication with google auth succeeds
3. Update the value of "oauth2.plugins.exclude" to google
4. Authentication with google auth still succeeds
5. Restart the management service ( service cloudstack-management restart)
6. Authentication with google still succeeds
oauth2.plugins= google,github
oauth2.plugins.exclude=google
...
### What to do about it?
Authentication with oauth provider should fail if its mentioned in the "oauth2.plugins.exclude"
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.