dbeaver / dbeaver/cloudbeaver

Team/User ID colon not allowed

Open Beginner friendly
#4,637 1 comment 0 reactions 0 assignees View on GitHub
wait for review xf:administration
Dominant language
TypeScript
Stars
5.1k
Forks
563
Avg merge
3d 9h
Merged PRs (30d)
59

Description

In cloudbeaver 25.0.5 team and usernames could include a colon ":"
Since 25.0.6 it is not allowed anymore. Could you allow colons again?

Background why this would be needed:
We use reverse header authentication with oauth-proxy and keycloak. oauth-proxy adds the groups/roles from keycloak in this format:
role:client:clientroles (e.g. role:test-db:cloudbeaver-support)

We configured this as the team id in cloudbeaver and that worked fine.
The alternative would be to either rewrite the header via additional proxy or add support in oauth-proxy to choose another delimiter.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing the TypeScript validation that rejects colons in team and user IDs, comparing the behavior in CloudBeaver 25.0.5 and 25.0.6. Done means IDs such as `role:test-db:cloudbeaver-support` are accepted again for reverse-header authentication without breaking other ID validation.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
authentication
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.