user restricted flag is reset on login #8513

Closed
opened 2025-11-02 08:09:19 -06:00 by GiteaMirror · 1 comment
Owner

Originally created by @netcicd on GitHub (Feb 6, 2022).

Gitea Version

1.17.0+dev-86-g92e81e97e

Git Version

No response

Operating System

docker

How are you running Gitea?

running as a container

Database

PostgreSQL

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Description

configured gitea with

gitea admin auth update-oauth --id 1 --required-claim-name giteaGroups --admin-group giteaAdmin --group-claim-name giteaGroups --restricted-group infraautomator,gitea-netcicd-read,gitea-netcicd-write,gitea-netcicd-admin,gitea-cicdtoolbox-read,gitea-cicdtoolbox-write,gitea-cicdtoolbox-admin --skip-local-2fa

when I log in using oauth and user has

"giteaGroups": [
    "gitea-netcicd-read",
    "gitea-cicdtoolbox-admin"
  ],

in the token, the restricted flag set at the user gets reset.

Screenshots

No response

Originally created by @netcicd on GitHub (Feb 6, 2022). ### Gitea Version 1.17.0+dev-86-g92e81e97e ### Git Version _No response_ ### Operating System docker ### How are you running Gitea? running as a container ### Database PostgreSQL ### Can you reproduce the bug on the Gitea demo site? No ### Log Gist _No response_ ### Description configured gitea with `gitea admin auth update-oauth --id 1 --required-claim-name giteaGroups --admin-group giteaAdmin --group-claim-name giteaGroups --restricted-group infraautomator,gitea-netcicd-read,gitea-netcicd-write,gitea-netcicd-admin,gitea-cicdtoolbox-read,gitea-cicdtoolbox-write,gitea-cicdtoolbox-admin --skip-local-2fa` when I log in using oauth and user has ``` "giteaGroups": [ "gitea-netcicd-read", "gitea-cicdtoolbox-admin" ], ``` in the token, the restricted flag set at the user gets reset. ### Screenshots _No response_
GiteaMirror added the type/question label 2025-11-02 08:09:19 -06:00
Author
Owner

@zeripath commented on GitHub (Feb 8, 2022):

--restricted-group is meant to be one group and one group only.

@zeripath commented on GitHub (Feb 8, 2022): --restricted-group is meant to be one group and one group only.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#8513