Pedro CastroandGitHub 9ae2381755 fix(auth): validate IdP authority before SAML account linking (#26005) ...

* fix(auth): validate IdP authority before SAML account linking

Adds verification that SAML IdP is authoritative for the email domain
before allowing account conversion

* fix(auth): deny by default on missing SAML tenant + optimize membership query

 - Block account conversion when tenant is missing (deny by default)
 - Replace JOIN + ILIKE with two indexed lookups for O(1) performance

* refactor(auth): apply data minimization to security logs

2025-12-20 17:45:18 +00:00

..

api

chore: Improves the core booking audit architecture by adding new capabilities and simplifying the existing interfaces. (#25872)

2025-12-18 12:46:24 +00:00

web

fix(auth): validate IdP authority before SAML account linking (#26005)

2025-12-20 17:45:18 +00:00