public/headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2026-10-05 14:23:36 +09:00
Code Issues Packages Projects Releases Wiki Activity

db: reject unknown OAuth client scopes at creation (#3424)

Browse Source 
Unknown scopes grant nothing, so clients were silently under-privileged.
Report every invalid scope at once.

Fixes #3406
This commit is contained in:
MsfPablo
2026-09-25 21:24:37 +02:00
committed by GitHub
parent 3746ad20db
commit d60bac5c79
6 changed files with 109 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hscontrol/api/v2/errors.go
+1
View File
@@ -72,6 +72,7 @@ func mapError(msg string, err error) error {
case errors.Is(err, db.ErrPreAuthKeyNotTaggedOrOwned),
errors.Is(err, db.ErrPreAuthKeyACLTagInvalid),
errors.Is(err, db.ErrOAuthClientScopeInvalid),
errors.Is(err, state.ErrGivenNameInvalid),
errors.Is(err, state.ErrGivenNameTaken),
errors.Is(err, state.ErrNodeNameNotUnique),