hluk / waiverdb / 24889349661

Builds Branch Commit Type Ran Committer Via Coverage
24889349661 unbind-ldap-connection Unbind LDAP connections to prevent file descriptor leaks ldap.initialize() connections were never explicitly closed, relying on garbage collection to call ldap_unbind_ext. Add finally blocks to ensure unbind_s() is called even when exceptions occ... push hluk github
83.73
24714794508 ldap-gssapi Drop authlib.jose and use uv sync in Dockerfile Replace authlib.jose.jwt.decode + create_load_key() with simple base64 JWT payload extraction for reading OIDC access token claims. The token was already verified during the OIDC login flow, so cryp... push hluk github
83.71
24710457935 ldap-gssapi Migrate LDAP to new server with GSSAPI authentication Some groups are only available in LDAP, so we cannot rely solely on OIDC token groups. Migrate to new IPA LDAP server with GSSAPI authentication, following the same approach as product-listing... push hluk github
83.71
24400463849 ldap-gssapi Migrate LDAP to new server with GSSAPI authentication Some groups are only available in LDAP, so we cannot rely solely on OIDC token groups. Migrate to new IPA LDAP server with GSSAPI authentication, following the same approach as product-listing... push hluk github
83.54
23886806496 fix-oidc-groups Fall back to decoded access token for OIDC group extraction When authenticating via the OIDC browser login, the ID token may not include group claims (realm_access.roles) depending on the Keycloak mapper configuration. Decode the access token JWT... push hluk github
83.6
23852426946 fix-oidc-groups Fall back to decoded access token for OIDC group extraction When authenticating via the OIDC browser login, the ID token may not include group claims (realm_access.roles) depending on the Keycloak mapper configuration. Decode the access token JWT... push Lukas Holecek github
83.6
23845723617 fix-oidc-groups Fall back to decoded access token for OIDC group extraction When authenticating via the OIDC browser login, the ID token may not include group claims (realm_access.roles) depending on the Keycloak mapper configuration. Decode the access token JWT... push Lukas Holecek github
83.65
23800653172 fix-oidc-groups Fall back to decoded access token for OIDC group extraction When authenticating via the OIDC browser login, the ID token may not include group claims (realm_access.roles) depending on the Keycloak mapper configuration. Decode the access token JWT... push hluk github
83.43
23799209579 fix-oidc-groups Fall back to session ID token for OIDC group extraction When authenticating via the OIDC browser login, the userinfo endpoint may not include provider-specific group claims. This change: - Requests the 'roles' OIDC scope so Keycloak includes rea... push Lukas Holecek github
83.39
23795864800 fix-oidc-groups Fall back to session ID token for OIDC group extraction When authenticating via the OIDC browser login, the userinfo endpoint may not include provider-specific group claims. Try the decoded ID token stored in the session as a fallback before atte... push hluk github
84.03
23751118189 oidc-groups Get groups from OIDC before falling back to LDAP JIRA: RHELWF-13972 Assisted-by: Claude Code push hluk github
83.72
23593766024 oidc-groups Get groups from OIDC before falling back to LDAP JIRA: RHELWF-13972 Assisted-by: Claude Code push hluk github
83.81
23593255390 oidc-groups Get groups from OIDC before falling back to LDAP JIRA: RHELWF-13972 Assisted-by: Claude Code push hluk github
83.74
23441416364 oidc-groups Get groups from OIDC before falling back to LDAP JIRA: RHELWF-13972 Assisted-by: Claude Code push hluk github
83.66
23430110031 oidc-groups Get groups from OIDC before falling back to LDAP JIRA: RHELWF-13972 Assisted-by: Claude Code push hluk github
83.65