mirror of
https://github.com/project-zot/zot.git
synced 2025-04-01 02:42:32 -05:00
GHSA-c9p4-xwr9-rfhx authN/authZ creds are added to the request context so that they can be tracked and enforced in the various subsystems. However, it was previously a appended list (incorrectly); consequently, even if the user has been removed from the group configuration, the user could still log in. Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com> |
||
---|---|---|
.. | ||
api | ||
cli | ||
cluster | ||
common | ||
compat | ||
compliance | ||
debug | ||
exporter | ||
extensions | ||
log | ||
meta | ||
regexp | ||
requestcontext | ||
retention | ||
scheduler | ||
storage | ||
test |