Visitar URL original
Cleanup and harden the OIDC allowed_subnets claim by stgraber · Pull Request #3079 · lxc/incus · GitHub
Skip to content

Cleanup and harden the OIDC allowed_subnets claim - #3079

Merged
hallyn merged 2 commits into
lxc:mainfrom
stgraber:hardening
Mar 25, 2026
Merged

Cleanup and harden the OIDC allowed_subnets claim#3079
hallyn merged 2 commits into
lxc:mainfrom
stgraber:hardening

Conversation

@stgraber

@stgraber stgraber commented Mar 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

stgraber added 2 commits March 24, 2026 17:38
@stgraber
doc/authentication: Clarify the type of incus.allowed_subnets
370d9c6 
Reported-by: https://7asecurity.com
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
@stgraber
incusd/auth/oidc: Cleanup and tighten subnet claim handling
071d395 
Move to a separate function and reject authentication for invalid values.

Reported-by: https://7asecurity.com
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
@github-actions github-actions Bot added the Documentation Documentation needs updating label Mar 24, 2026
@hallyn
hallyn merged commit 39a5abf into lxc:main Mar 25, 2026
107 of 108 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hallyn hallyn hallyn approved these changes

Assignees

No one assigned

Labels

Documentation Documentation needs updating

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@stgraber @hallyn