serverpack: Refactor multiauth sso cookie on validate principal

This commit is contained in:
2026-01-13 14:32:39 +01:00
parent ed08980df3
commit b879555e6a

View File

@@ -249,10 +249,11 @@ let ssoCookieOptions (settings: MultiAuthSettings) (o: CookieAuthenticationOptio
o.ExpireTimeSpan <- TimeSpan.FromHours settings.sso.ttl
o.Events.OnValidatePrincipal <-
fun ctx ->
if ctx.Principal.HasClaim(fun x -> x.Type = "impersonating") then
Task.FromResult ()
else
updatePrincipalContext settings.oidc ctx
task {
let isImpersonating = ctx.Principal.HasClaim(fun x -> x.Type = "impersonating")
if not isImpersonating then
do! updatePrincipalContext settings.oidc ctx
}
let oidOptions (settings: MultiAuthSettings) (o: OpenIdConnectOptions) =
o.Authority <- settings.oidc.issuer