(delint: Is this a less messy rule?)
This commit is contained in:
@@ -14,12 +14,6 @@ import data.common
|
|||||||
|
|
||||||
default allow := false
|
default allow := false
|
||||||
|
|
||||||
is_interactive if {
|
|
||||||
# Only `m.login.sso` (the interactive web form) is interactive;
|
|
||||||
# `m.login.password` and `m.login.token` (including the finalisation of an SSO login) are not
|
|
||||||
input.login.type == "m.login.sso"
|
|
||||||
}
|
|
||||||
|
|
||||||
allow if {
|
allow if {
|
||||||
count(violation) == 0
|
count(violation) == 0
|
||||||
}
|
}
|
||||||
@@ -72,3 +66,9 @@ violation contains {
|
|||||||
# sessions to return under the limit.
|
# sessions to return under the limit.
|
||||||
data.session_limit.hard_limit <= input.session_counts.total
|
data.session_limit.hard_limit <= input.session_counts.total
|
||||||
}
|
}
|
||||||
|
|
||||||
|
is_interactive if {
|
||||||
|
# Only `m.login.sso` (the interactive web form) is interactive;
|
||||||
|
# `m.login.password` and `m.login.token` (including the finalisation of an SSO login) are not
|
||||||
|
input.login.type == "m.login.sso"
|
||||||
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user