You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Changed
Policies that compare a claim with a number or a Boolean are no longer refused. As in Screenplay, such a comparison never matches, so the rest of the policy decides: an or with a role still allows callers with that role, and the comparison alone denies. (part of #57)
Security
A claim compared with a Uuid matches only the Uuid's canonical lower-case text. A query argument that reaches the policy as an empty, upper-case or otherwise non-canonical string no longer matches a claim, so a caller holding an empty claim value is denied. (part of #57)