Skip to content

Refactoring and Fixes#55

Merged
thathoff merged 14 commits into
mainfrom
release-3.6.0
May 12, 2026
Merged

Refactoring and Fixes#55
thathoff merged 14 commits into
mainfrom
release-3.6.0

Conversation

@thathoff
Copy link
Copy Markdown
Owner

No description provided.

thathoff added 4 commits May 12, 2026 22:38
Replaces the hardcoded Azure AD `upn` override with two new provider
options `emailField` (default "email") and `emailVerified`. This
prevents arbitrary providers from claiming identities via a `upn` claim
and lets each provider decide which field carries the email and whether
it is implicitly verified.

Note: Azure AD configurations must now explicitly set
`emailField: 'upn'` and `emailVerified: true`.
The strict `=== false` check previously let null/missing values through.
Prevents type juggling matches (e.g. when 0/true/null end up in the list)
and aligns the email/domain whitelist with Kirby's case-insensitive user
lookup.
Use explicit `??` assignments instead of `$$var` and rename
`$email_verified` to `$emailVerified` for consistency.
@thathoff thathoff self-assigned this May 12, 2026
thathoff added 9 commits May 12, 2026 23:17
Adds property, parameter and return types across Controller, Provider
and ProvidersManager. Switches Session access from __call magic to
typed `data()` calls and fixes an operator precedence bug in the
empty-user-list check.
Replaces call_user_func_array with direct variable method calls and
validates the provider class is an AbstractProvider before assignment.
Marks `error()` and `goToPanel()` as `: never` so PHPStan knows the
control flow terminates, and tightens the provider lookup and the
`get('error')` value handling against null/mixed types.
@thathoff thathoff changed the title Release 3.6.0 Refactoring and Fixes May 12, 2026
@thathoff thathoff merged commit c232497 into main May 12, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant