Pedro CastroandGitHub 9ae2381755 fix(auth): validate IdP authority before SAML account linking (#26005) ...

* fix(auth): validate IdP authority before SAML account linking

Adds verification that SAML IdP is authoritative for the email domain
before allowing account conversion

* fix(auth): deny by default on missing SAML tenant + optimize membership query

 - Block account conversion when tenant is missing (deny by default)
 - Replace JOIN + ILIKE with two indexed lookups for O(1) performance

* refactor(auth): apply data minimization to security logs

2025-12-20 17:45:18 +00:00

..

hooks

fix: video install step v3 (#24865)

2025-11-03 13:25:54 +00:00

checkAdminOrOwner.ts

chore: Use enums instead of hardcoded strings (#24132)

2025-09-29 10:57:36 +01:00

dub.ts

feat: Dub App integration (#21321)

2025-05-22 09:18:45 -07:00

ensureSession.ts

feat(web): improve session retrieval performance (#7584)

2023-03-10 23:45:24 +00:00

ErrorCode.ts

feat: implements basic user locking for admins (#12393)

2023-11-17 16:06:29 +00:00

getLocale.ts

refactor: Get rid of usages of Next.js private interfaces in our codebase (#23080)

2025-08-14 09:51:49 -03:00

getLocaleFromRequest.ts

feat: upgrade Prisma to 6.16.0 with no-rust engine (#23816)

2025-10-21 20:02:03 +01:00

getServerSession.ts

refactor: Migrate repositories/services from /lib to /features (#25925)

2025-12-17 14:14:50 +00:00

getSession.ts

feat(web): improve session retrieval performance (#7584)

2023-03-10 23:45:24 +00:00

next-auth-custom-adapter.ts

feat: upgrade Prisma to 6.16.0 with no-rust engine (#23816)

2025-10-21 20:02:03 +01:00

next-auth-options.test.ts

add tests (#25566)

2025-12-14 19:14:15 +09:00

next-auth-options.ts

fix(auth): validate IdP authority before SAML account linking (#26005)

2025-12-20 17:45:18 +00:00

oAuthAuthorization.ts

feat: optimize Prisma queries by replacing findFirst with findUnique where applicable (#21826)

2025-06-17 09:52:02 +03:00

onboardingUtils.ts

fix: skip plan on invite to team (#25924)

2025-12-16 14:44:35 +00:00

passwordResetRequest.ts

refactor: Split EmailManager into focused service files (#24997)

2025-11-11 14:21:10 +02:00

samlAccountLinking.test.ts

fix(auth): validate IdP authority before SAML account linking (#26005)

2025-12-20 17:45:18 +00:00

samlAccountLinking.ts

fix(auth): validate IdP authority before SAML account linking (#26005)

2025-12-20 17:45:18 +00:00

sendVerificationRequest.ts

fix: signup (#25334)

2025-11-21 19:51:19 +00:00

signJwt.ts

Move some dependencies into async (#8270)

2023-04-14 14:25:15 -07:00

validPassword.ts

feat(web): improve session retrieval performance (#7584)

2023-03-10 23:45:24 +00:00

verifyCodeUnAuthenticated.ts

refactor: migrate verifyCodeUnAuthenticated from TRPC layer to features layer (#25639)

2025-12-08 10:54:46 +02:00

verifyEmail.ts

chore: standarize rate limit structure (#25736)

2025-12-10 01:04:21 +00:00

verifyPassword.ts

feat(web): improve session retrieval performance (#7584)

2023-03-10 23:45:24 +00:00