studio/tuwunel
2
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Allow subject to be listed in a provider's userid_claims with special precedence.

Browse Source 
Signed-off-by: Jason Volk <jason@zemos.net>
This commit is contained in:
Jason Volk
2026-02-26 05:20:37 +00:00
parent 99bbcb34b6
commit 591014c190
3 changed files with 28 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
src/core/config/mod.rs
View File

@@ -2714,9 +2714,17 @@ pub struct IdentityProvider {
/// compute a Matrix UserId for new registrations. Reviewing Tuwunel's
/// documentation will be necessary for a complete description in detail. An
/// empty array imposes no restriction here, avoiding generated fallbacks as
/// much as possible. For simplicity we reserve a claim called "unique"
/// which can be listed alone to ensure *only* generated ID's are used for
/// registrations.
/// much as possible.
///
/// For simplicity we reserve a claim called "unique" which can be listed
/// alone to ensure *only* generated ID's are used for registrations.
///
/// Note that listing the claim "sub" has special significance and will take
/// precedence over all other claims, listed or unlisted. "sub" is not
/// normally used to determine a UserId unless explicitly listed here.
///
/// As of now arbitrary claims cannot be listed here, we only recognize
/// specific hard-coded claims.
///
/// default: []
#[serde(default)]