0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 21:45:25 +08:00
discourse/spec/lib/validators
Osama Sayegh 17e4bb4109
FIX: Reject DiscourseConnect SSO payloads when secret is blank (#40830)
DiscourseConnect verified SSO payload signatures with whatever
`discourse_connect_secret` was configured, including an empty string, so
an instance with DiscourseConnect enabled but no secret set did not fail
safely.

`DiscourseConnectBase#parse` now fails when the effective secret is
blank, and `EnableSsoValidator` refuses to enable DiscourseConnect
unless a secret of at least 10 characters is set.
2026-06-12 15:17:16 +03:00
..
allowed_ip_address_validator_spec.rb
at_least_one_group_validator_spec.rb
category_search_priority_weights_validator_spec.rb
censored_words_validator_spec.rb
csp_script_src_validator_spec.rb
css_color_validator_spec.rb
css_color_with_blank_validator_spec.rb
datetime_setting_validator_spec.rb DEV: Add datetime type for site settings / object settings (#36849) 2025-12-30 10:52:30 -06:00
delete_rejected_email_after_days_spec.rb
email_address_validator_spec.rb
email_setting_validator_spec.rb
email_validator_spec.rb
enable_discourse_id_validator_spec.rb
enable_local_logins_via_email_validator_spec.rb
enable_sso_validator_spec.rb FIX: Reject DiscourseConnect SSO payloads when secret is blank (#40830) 2026-06-12 15:17:16 +03:00
external_system_avatars_validator_spec.rb
form_template_yaml_validator_spec.rb
group_setting_validator_spec.rb
host_list_setting_validator_spec.rb
integer_setting_validator_spec.rb
ip_address_format_validator_spec.rb
linkedin_oidc_credentials_validator_spec.rb
max_emojis_validator_spec.rb
max_username_length_validator_spec.rb
mediaconvert_output_subdirectory_validator_spec.rb
min_username_length_validator_spec.rb
objects_setting_validator_spec.rb FIX: Fix ObjectsSettingValidator error message handling (#38336) 2026-03-09 14:50:17 -03:00
password_validator_spec.rb
post_validator_spec.rb FIX: Cap the number of [quote] tags allowed per post (#40281) 2026-05-26 10:33:21 -03:00
quality_title_validator_spec.rb
regex_presence_validator_spec.rb
regex_setting_validator_spec.rb
regexp_list_validator_spec.rb
reply_by_email_address_validator_spec.rb
reply_by_email_enabled_validator_spec.rb
search_ranking_weights_validator_spec.rb
search_tokenize_chinese_validator_spec.rb
search_tokenize_japanese_validator_spec.rb
selectable_avatars_mode_validator_spec.rb
sso_overrides_email_validator_spec.rb FIX: Reject DiscourseConnect SSO payloads when secret is blank (#40830) 2026-06-12 15:17:16 +03:00
string_setting_validator_spec.rb
timezone_validator_spec.rb
top_menu_validator_spec.rb FEATURE: Add upcoming change for unified new view (#40631) 2026-06-09 11:34:22 +10:00
topic_setting_validator_spec.rb FEATURE: Add new configurable moderation guide (#36287) 2025-12-01 10:30:32 +08:00
topic_title_length_validator_spec.rb DEV: Enable Style/RedundantParentheses rubocop rule (#40095) 2026-05-19 15:48:09 +02:00
unicode_username_allowlist_validator_spec.rb
unicode_username_validator_spec.rb
upload_validator_spec.rb DEV: clean up splash SVG on upload, not when rendering (#37681) 2026-02-16 13:14:35 +10:00
url_validator_spec.rb
user_full_name_validator_spec.rb
user_password_validator_spec.rb
username_setting_validator_spec.rb