Fix JWT claims request (#61650)

* Fix JWT claims request

* Add test scenarios for missing config options
This commit is contained in:
linoman
2023-01-19 16:03:09 +01:00
committed by GitHub
parent f28a437eb2
commit 56c2755b3b
2 changed files with 113 additions and 2 deletions

View File

@@ -115,10 +115,10 @@ func (s *JWT) Authenticate(ctx context.Context, r *authn.Request) (*authn.Identi
}
}
if id.Login == "" || id.Email == "" {
if id.Login == "" && id.Email == "" {
s.log.Debug("Failed to get an authentication claim from JWT",
"login", id.Login, "email", id.Email)
return nil, ErrJWTMissingClaim.Errorf("missing login or email claim in JWT")
return nil, ErrJWTMissingClaim.Errorf("missing login and email claim in JWT")
}
if s.cfg.JWTAuthAutoSignUp {