Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(admin-ui): update token script should reject the tampered user-info-jwt #1952

Closed
duttarnab opened this issue Jan 1, 2025 · 0 comments · Fixed by #1960
Closed

fix(admin-ui): update token script should reject the tampered user-info-jwt #1952

duttarnab opened this issue Jan 1, 2025 · 0 comments · Fixed by #1960
Assignees
@duttarnab @moabu
Labels
bug Something isn't working comp-admin-ui Component affected by issue or PR kind-bug Issue or PR is a bug in existing functionality

Comments

@duttarnab
Copy link
Contributor

duttarnab commented Jan 1, 2025 •
edited by mjatin-dev
Loading

    • the update token script (role_based_scopes_update_token) should reject the tampered user-info-jwt (script changes).

image

    • Missing required permission should be displayed properly inside card.
      image
    • If /jans-config-api/app/admin-ui/oauth2/api-protection-token fails after login then this message should be displayed on Dashboard and no menu should appear in side bar except Sign out
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@duttarnab duttarnab

@moabu moabu

Labels
bug Something isn't working comp-admin-ui Component affected by issue or PR kind-bug Issue or PR is a bug in existing functionality
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

fix(admin-ui): update token script should reject the tampered user-info-jwt GluuFederation/flex
2 participants
@duttarnab @moabu