Skip to content

Preserve local recovery under required OIDC access - #43

Merged
chen21019 merged 1 commit into
mainfrom
fix/oidc-required-local-recovery
Sep 21, 2026
Merged

chen21019 merged 1 commit into
mainfrom
fix/oidc-required-local-recovery

Conversation

@chen21019

Copy link
Copy Markdown

Result

Preserve the documented local-administrator recovery session when OIDC site access uses required, without weakening the normal external user/group allow-list.

Verification

  • Full 38-module auth reactor: BUILD SUCCESS; auth-logic 96/96 tests
  • Clean-tree scripts/check-pasturestack-source: PASS for 0.183.316
  • Added fail-closed tests for non-admin, inactive, malformed, recovery-disabled, allowed OIDC group, and denied OIDC group sessions

@chen21019
chen21019 requested a review from a team as a code owner September 21, 2026 10:00
@chen21019
chen21019 enabled auto-merge (squash) September 21, 2026 10:04
@chen21019
chen21019 merged commit 023a95f into main Sep 21, 2026
5 checks passed
@chen21019
chen21019 deleted the fix/oidc-required-local-recovery branch September 21, 2026 10:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant