Skip to content

fix: Check group allow list based on the display name - #1478

Open
CarlSchwan wants to merge 1 commit into
mainfrom
carl/groupdisplayname-match
Open

fix: Check group allow list based on the display name#1478
CarlSchwan wants to merge 1 commit into
mainfrom
carl/groupdisplayname-match

Conversation

@CarlSchwan

@CarlSchwan CarlSchwan commented Jul 22, 2026

Copy link
Copy Markdown
Member

Since a few versions ago, we use ICreateNamedGroupBackend to create group on the default database backend. This will use the display name as GID unless the display name is too long and in that case will use a random GID.

This random GID is impossible to match with the regex.

Fix #1472

Thanks to @OScaleSven for the initial research :)

🤖 AI (if applicable)

  • The content of this PR was partly or fully generated using AI

Since a few versions ago, we use ICreateNamedGroupBackend to create
group on the default database backend. This will use the display name as
GID unless the display name is too long and in that case will use a
random GID.

This random GID is impossible to match with the regex.

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
@CarlSchwan
CarlSchwan requested a review from julien-nc July 22, 2026 09:46
@CarlSchwan CarlSchwan self-assigned this Jul 22, 2026
@CarlSchwan CarlSchwan added bug Something isn't working 3. to review labels Jul 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Users are not automatically removed from Keycloak groups

1 participant