Sacha Al Himdani 54c055ebcc
Require verified domain ownership for Microsoft OIDC ...
Stop trusting the email on its own: set trustProviderEmail to false so
email_verified is required, and additionally require the "xms_edov"
claim, which Azure sets only after verifying the issuing tenant owns
the email's domain. A token that lacks it is rejected before any
identity is matched.
Signed-off-by: Sacha Al Himdani <sacha@probo.com >
2026-07-13 10:54:59 +02:00
2026-07-11 18:41:40 +02:00
2026-07-08 11:23:00 +02:00
2026-06-23 18:24:50 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-06-22 19:23:41 +02:00
2026-07-11 16:50:32 +02:00
2026-06-12 17:24:00 +02:00
2026-06-19 17:13:39 +02:00
2026-06-09 16:45:23 +02:00
2026-06-23 19:17:56 +02:00
2026-07-02 18:25:41 +02:00
2026-07-11 19:47:56 +02:00
2026-07-09 09:51:37 -04:00
2026-07-10 18:29:54 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-07-09 10:27:22 +02:00
2026-06-09 16:45:23 +02:00
2026-07-02 18:45:51 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-07-03 10:11:47 +02:00
2026-06-09 16:45:23 +02:00
2026-07-13 10:54:59 +02:00
2026-07-07 13:51:11 +00:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-06-16 14:35:16 +02:00
2026-06-30 18:36:47 +02:00
2026-06-16 14:35:16 +02:00
2026-06-09 16:45:23 +02:00
2026-07-09 09:51:37 -04:00
2026-06-23 19:36:34 +02:00
2026-07-11 16:50:32 +02:00
2026-07-11 16:50:32 +02:00
2026-06-11 13:46:10 +02:00
2026-06-23 18:24:50 +02:00
2026-06-09 16:45:23 +02:00
2026-06-16 14:35:16 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-07-11 18:41:28 +02:00
2026-07-06 18:41:51 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-06-12 14:39:53 +02:00
2026-06-12 14:39:53 +02:00
2026-07-09 09:51:38 -04:00
2026-06-10 17:49:40 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-06-30 14:44:07 +02:00
2026-07-01 17:13:59 +02:00
2026-06-12 14:39:51 +02:00
54c055ebcc