kolaente ced7ebd97f fix(auth): tolerate string booleans in oidc provider config (#2599) ...

The four boolean OIDC provider fields (emailfallback, usernamefallback,
forceuserinfo, requireavailability) were parsed with a strict .(bool)
type assertion. That works for YAML/JSON config where leaves are native
bools, but fails for every other input path: env vars always arrive as
strings, and GetConfigValueFromFile (used by the *.file Docker secret
convention) also always returns strings. The assertion would silently
zero the field for emailfallback and usernamefallback, and log an error
and zero the field for forceuserinfo and requireavailability, which is
what #2599 reports.

Extract a small parseBoolField helper that accepts both native bools and
strings (via strconv.ParseBool) and logs a parse error from each call
site. This also fixes the previously-silent drop of stringified
emailfallback / usernamefallback values — those now log an error if the
input is garbage, matching the behaviour of the other two fields.

Fixes #2599

2026-04-11 19:10:26 +00:00

..

cron.go

fix: add missing Commit() to write callers

2026-02-25 11:03:02 +01:00

main_test.go

…

openid_test.go

test(auth): add failing unit tests for OIDC TOTP enforcement

2026-04-09 17:25:47 +00:00

openid.go

fix(auth): enforce TOTP on OIDC callback for users with 2FA enabled

2026-04-09 17:25:47 +00:00

providers_test.go

test(auth): cover env-var string booleans for oidc providers (#2599)

2026-04-11 19:10:26 +00:00

providers.go

fix(auth): tolerate string booleans in oidc provider config (#2599)

2026-04-11 19:10:26 +00:00