Sacha Al Himdani af475bb02e
Skip absent email_verified for Microsoft OIDC ...
The nOAuth fix set trustProviderEmail to false, requiring the
email_verified claim. Microsoft never emits that claim, so the check
rejected every legitimate Microsoft login before the xms_edov check
was reached.
Restore trustProviderEmail to true and keep the required xms_edov
claim, which is the actual nOAuth mitigation: Azure sets it only after
verifying the issuing tenant owns the email's domain, so a token
lacking it is still rejected before any identity is matched.
Signed-off-by: Sacha Al Himdani <sacha@probo.com >
2026-07-13 13:06:19 +02:00
2026-07-11 18:41:40 +02:00
2026-07-08 11:23:00 +02:00
2026-06-23 18:24:50 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-06-22 19:23:41 +02:00
2026-07-11 16:50:32 +02:00
2026-06-12 17:24:00 +02:00
2026-06-19 17:13:39 +02:00
2026-06-09 16:45:23 +02:00
2026-06-23 19:17:56 +02:00
2026-07-02 18:25:41 +02:00
2026-07-11 19:47:56 +02:00
2026-07-09 09:51:37 -04:00
2026-07-10 18:29:54 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-07-09 10:27:22 +02:00
2026-06-09 16:45:23 +02:00
2026-07-02 18:45:51 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-07-03 10:11:47 +02:00
2026-06-09 16:45:23 +02:00
2026-07-13 13:06:19 +02:00
2026-07-07 13:51:11 +00:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-06-16 14:35:16 +02:00
2026-06-30 18:36:47 +02:00
2026-06-16 14:35:16 +02:00
2026-06-09 16:45:23 +02:00
2026-07-09 09:51:37 -04:00
2026-06-23 19:36:34 +02:00
2026-07-11 16:50:32 +02:00
2026-07-11 16:50:32 +02:00
2026-06-11 13:46:10 +02:00
2026-06-23 18:24:50 +02:00
2026-06-09 16:45:23 +02:00
2026-06-16 14:35:16 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-07-11 18:41:28 +02:00
2026-07-06 18:41:51 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-06-12 14:39:53 +02:00
2026-06-12 14:39:53 +02:00
2026-07-09 09:51:38 -04:00
2026-06-10 17:49:40 +02:00
2026-06-09 16:45:23 +02:00
2026-06-09 16:45:23 +02:00
2026-06-30 14:44:07 +02:00
2026-07-01 17:13:59 +02:00
2026-06-12 14:39:51 +02:00
af475bb02e