letro/letro-authentication-service
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Update OPA and Regal to their latest versions

Browse Source
This commit is contained in:
Quentin Gliech
2025-02-18 11:48:44 +01:00
parent 993342ef58
commit 430eed25dd
3 changed files with 6 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
policies/client_registration/client_registration.rego
View File

@@ -18,8 +18,7 @@ parse_uri(url) := obj if {
obj := {"scheme": matches[1], "authority": matches[2], "host": matches[3], "port": matches[4], "path": matches[5]}
}
secure_url(x) if {
x
secure_url(_) if {
data.client_registration.allow_insecure_uris
}
@@ -37,16 +36,12 @@ secure_url(x) if {
url.port == ""
}
host_matches_client_uri(x) if {
x
host_matches_client_uri(_) if {
# Do not check we allow host mismatch
data.client_registration.allow_host_mismatch
}
host_matches_client_uri(x) if {
x
host_matches_client_uri(_) if {
# Do not check if the client_uri is missing and we allow that
data.client_registration.allow_missing_client_uri
not data.client_metadata.client_uri