Ryo Kusnadi 31722c878e fix(proxy): answer 403 instead of 500 when the role claim is missing ...

With PROXY_ROLE_ASSIGNMENT_DRIVER=oidc, a token whose claims give no
OpenCloud role made the account resolver answer 500. Mark these claim
errors with userroles.ErrRoleClaim and answer 403 for them. Failures of
the settings or gateway service still answer 500.

Signed-off-by: Ryo Kusnadi <ryokusnadi@gmail.com>

2026-11-04 15:29:30 +01:00

..

command

fix: only trust forwarding headers from trusted reverse proxies

2026-10-30 15:15:22 +01:00

config

fix: only trust forwarding headers from trusted reverse proxies

2026-10-30 15:15:22 +01:00

metrics

feat(proxy): add the service to the proxy metrics: re-add legacy metrics for compatibility

2026-09-18 09:52:33 +02:00

middleware

fix(proxy): answer 403 instead of 500 when the role claim is missing

2026-11-04 15:29:30 +01:00

proxy

fix: client address for clients in a private network and behind the proxy

2026-11-02 10:25:18 +01:00

router

feat(proxy): add the service to the proxy metrics

2026-09-18 09:52:33 +02:00

server

fix: nats checks were missing the configured auth

2026-10-14 17:45:44 +02:00

staticroutes

chore: regenerate mockery outputs

2026-09-16 14:57:41 +02:00

user/backend

chore: regenerate mockery outputs

2026-09-16 14:57:41 +02:00

userroles

fix(proxy): answer 403 instead of 500 when the role claim is missing

2026-11-04 15:29:30 +01:00

webdav

Stream auth failure bodies through encoders

2026-10-06 10:22:41 +02:00