Michael Manganiello 7fedaca59a fix: Improve OIDC email verified check ...

The OIDC email verified check now fails if the email is explicitly
unverified, or if the `email_verified` claim is supported and the email
is not explicitly verified.

Previously, the OIDC implementation failed for any OIDC provider that
did not include the `email_verified` claim in the userinfo response.
Providers like Synology do not include this claim, so the check always
failed with error "Email is not verified."

I haven't found a formal specification for the `email_verified` claim,
and how it should be handled, but this implementation should be more
robust and work with more OIDC providers.

Fixes #1446.

2025-01-09 00:55:20 -03:00

..

tests

misc: Move auth constants to separate file

2025-01-08 22:16:31 -03:00

__init__.py

add tests for oidc handler

2024-12-12 17:37:30 -05:00

base_handler.py

fix: Improve OIDC email verified check

2025-01-09 00:55:20 -03:00

constants.py

misc: Move auth constants to separate file

2025-01-08 22:16:31 -03:00

hybrid_auth.py

run trunk format on all files

2024-05-21 10:18:13 -04:00

middleware.py

Update middleware based on review

2024-12-02 18:56:58 +01:00