Skip to content

Release v4.31.0

Choose a tag to compare

@github-actions github-actions released this 08 Oct 07:39
6b573e0

Changed

  • Policies that compare a claim with a number or a Boolean are no longer refused. As in Screenplay, such a comparison never matches, so the rest of the policy decides: an or with a role still allows callers with that role, and the comparison alone denies. (part of #57)

Security

  • A claim compared with a Uuid matches only the Uuid's canonical lower-case text. A query argument that reaches the policy as an empty, upper-case or otherwise non-canonical string no longer matches a claim, so a caller holding an empty claim value is denied. (part of #57)