daml/triggers/service
Gary Verhaegen b1c6e87803
fix claims check in auth middleware (#10768)
The claims check in the auth middleware was switched around: in effect,
it checked that we did not receive _more_ than we asked for, rather than
checking we receive _at least_ what we asked for.

Of course this would still not let anyone run any trigger without the
proper access token, but it would let people list running triggers and
request (or stop) trigger executions.

CHANGELOG_BEGIN
- Fix a bug in the auth middleware where insufficient credentials could
  still give access to list of running triggers.
CHANGELOG_END
2021-09-03 13:31:26 +00:00
..
auth fix claims check in auth middleware (#10768) 2021-09-03 13:31:26 +00:00
release Rename targets (#5950) 2020-05-12 16:00:15 -04:00
src Handle dynamic port in auth middleware client (trigger service) (#10755) 2021-09-02 18:06:48 +02:00
test-model update copyright notices for 2021 (#8257) 2021-01-01 19:49:51 +01:00
authentication.md Don't always redirect to /login automatically (#8532) 2021-01-18 14:03:39 +00:00
BUILD.bazel Handle dynamic port in auth middleware client (trigger service) (#10755) 2021-09-02 18:06:48 +02:00
daml-platform.sh update copyright notices for 2021 (#8257) 2021-01-01 19:49:51 +01:00
hash-migrations.sh update copyright notices for 2021 (#8257) 2021-01-01 19:49:51 +01:00