From 68e78a2230560d145f5f2f0c7a57ee454da7f674 Mon Sep 17 00:00:00 2001 From: Bryan Frimin Date: Fri, 24 Jul 2026 21:28:28 +0000 Subject: [PATCH] Drop redundant validateIDTokenClaims comment The check order is clear from the code and covered by tests. Signed-off-by: Cursor Agent Co-authored-by: Bryan FRIMIN --- pkg/iam/oidc/service.go | 4 ---- 1 file changed, 4 deletions(-) diff --git a/pkg/iam/oidc/service.go b/pkg/iam/oidc/service.go index 33e8baec9..91fa37e71 100644 --- a/pkg/iam/oidc/service.go +++ b/pkg/iam/oidc/service.go @@ -165,10 +165,6 @@ func (c *idTokenClaims) isEmailDomainOwnerVerified() bool { return false } -// validateIDTokenClaims enforces provider-specific account requirements. -// Enterprise eligibility is checked before email-verification claims so -// personal Google/Microsoft accounts surface ErrPersonalAccountNotAllowed -// rather than a generic email-verification failure (e.g. missing xms_edov). func validateIDTokenClaims(info *providerInfo, claims *idTokenClaims) error { if claims.Email == "" { return NewMissingEmailClaimError()