mirrors/beszel
1
0
Fork 0
mirror of https://github.com/henrygd/beszel.git synced 2026-10-21 22:02:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(users): warn on invalid OAUTH_DEFAULT_USER_ROLE values

Browse Source
This commit is contained in:
henrygd
2026-10-13 08:39:37 -04:00
parent 13ea8106eb
commit d5f50fa461
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/users/users.go
+8 -3
View File
@@ -27,9 +27,14 @@ func NewUserManager(app core.App) *UserManager {
// oauthDefaultRole returns the role for new OAuth users from OAUTH_DEFAULT_USER_ROLE.
// Only "user" and "readonly" are accepted; anything else (including "admin") falls back to "user".
func oauthDefaultRole() string {
if role, _ := utils.GetEnv("OAUTH_DEFAULT_USER_ROLE"); role == "readonly" {
func oauthDefaultRole(app core.App) string {
role, _ := utils.GetEnv("OAUTH_DEFAULT_USER_ROLE")
switch role {
case "readonly":
return role
case "", "user":
default:
app.Logger().Warn("Invalid OAUTH_DEFAULT_USER_ROLE, using \"user\"", "value", role)
}
return "user"
}
@@ -40,7 +45,7 @@ func (um *UserManager) InitializeOAuthUserRole(e *core.RecordAuthWithOAuth2Reque
if e.CreateData == nil {
e.CreateData = make(map[string]any)
}
e.CreateData["role"] = oauthDefaultRole()
e.CreateData["role"] = oauthDefaultRole(e.App)
}
return e.Next()
}