[
https://issues.apache.org/jira/browse/SYNCOPE-1651?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17448486#comment-17448486
]
ASF subversion and git services commented on SYNCOPE-1651:
----------------------------------------------------------
Commit 2f23ffe579156d901d0cfd1079c3254b925a9c8a in syncope's branch
refs/heads/2_1_X from Francesco Chicchiriccò
[ https://gitbox.apache.org/repos/asf?p=syncope.git;h=2f23ffe ]
[SYNCOPE-1651] Reviewing delegation validation logic
> Invalid users can be specified in X-Syncope-Delegated-By
> --------------------------------------------------------
>
> Key: SYNCOPE-1651
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1651
> Project: Syncope
> Issue Type: Bug
> Components: core
> Affects Versions: 2.1.10
> Reporter: Francesco Chicchiriccò
> Assignee: Francesco Chicchiriccò
> Priority: Major
> Fix For: 2.1.11, 3.0.0
>
>
> {{X-Syncope-Delegated-By}} header values like {code}user_not_found{code}
> (where {{user_not_found}} does not match any exiting user) do not throw any
> processing exceptions and result into values like {code}user_found delegated
> by user_not_found{code} (where {{user_found}} is the authenticating user) for
> Audit and metadata.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
