green-hydrogen-40793
03/18/2025, 8:22 PMgreen-hydrogen-40793
03/19/2025, 2:49 PMdamp-solstice-40552
03/20/2025, 11:00 PMgoogle-jsonnet.json
, once I recude it to
local claims = {
email_verified: false
} + std.extVar('claims');
{
identity: {
traits: {
// Allowing unverified email addresses enables account
// enumeration attacks, especially if the value is used for
// e.g. verification or as a password login identifier.
//
// Therefore we only return the email if it (a) exists and (b) is marked verified
// by GitHub.
[if "email" in claims && claims.email_verified then "email" else null]: claims.email,
},
},
}
it did a thing. Keep in mind I even strip name to make it work ...damp-solstice-40552
03/21/2025, 12:07 AMdamp-solstice-40552
03/21/2025, 12:34 AMlocal claims = {
email_verified: false
} + std.extVar('claims');
{
identity: {
traits: {
// Allowing unverified email addresses enables account
// enumeration attacks, especially if the value is used for
// e.g. verification or as a password login identifier.
//
// Therefore we only return the email if it (a) exists and (b) is marked verified
// by GitHub.
[if "email" in claims && claims.email_verified then "email" else null]: claims.email,
},
metadata_public: {
name: claims.name,
}
},
}