Team/User ID colon not allowed
- Dominant language
- TypeScript
- Stars
- 5.1k
- Forks
- 563
- Avg merge
- 3d 9h
- Merged PRs (30d)
- 59
Description
In cloudbeaver 25.0.5 team and usernames could include a colon ":"
Since 25.0.6 it is not allowed anymore. Could you allow colons again?
Background why this would be needed:
We use reverse header authentication with oauth-proxy and keycloak. oauth-proxy adds the groups/roles from keycloak in this format:
role:client:clientroles (e.g. role:test-db:cloudbeaver-support)
We configured this as the team id in cloudbeaver and that worked fine.
The alternative would be to either rewrite the header via additional proxy or add support in oauth-proxy to choose another delimiter.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by tracing the TypeScript validation that rejects colons in team and user IDs, comparing the behavior in CloudBeaver 25.0.5 and 25.0.6. Done means IDs such as `role:test-db:cloudbeaver-support` are accepted again for reverse-header authentication without breaking other ID validation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 68/100