inbuxa/inbuxa-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 23 Wiki Activity

Honor the client registration override only in setup and recovery

Browse Source 
The recovery administrator signs in before any OAuth client is
registered, so it needs to skip the registration check. Outside
bootstrap and recovery mode, every account now signs in through a
registered client and one of its redirect URIs.
This commit is contained in:
jcoffey-dev
2026-09-29 08:25:13 -07:00
parent ffcfde0b5a
commit ca6484c356
1 changed files with 11 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/http/src/auth/oauth/registration.rs
+6 -2
View File
@@ -270,8 +270,12 @@ impl ClientRegistrationHandler for Server {
false false
}; };
// Check if the account is allowed to override client registration // Check if the account is allowed to override client registration.
if self // inbuxa: only while setting up or recovering, when the recovery
// administrator signs in before any client is registered (contract C-5)
let registry = self.registry();
if (registry.is_bootstrap_mode() || registry.is_recovery_mode())
&& self
.access_token(account_id) .access_token(account_id)
.await .await
.caused_by(trc::location!())? .caused_by(trc::location!())?