Skip to content

dbeaver/pro#11123 Preserve external SSO identity sources - #15

Merged
alexander-skoblikov merged 1 commit into
develfrom
dbeaver/pro#11123-use-email-for-external-sso-source
Oct 15, 2026
Merged

alexander-skoblikov merged 1 commit into
develfrom
dbeaver/pro#11123-use-email-for-external-sso-source

Conversation

@alexander-skoblikov

@alexander-skoblikov alexander-skoblikov commented Oct 14, 2026 •

Copy link
Copy Markdown
Member

Closes dbeaver/pro#11123

Summary

  • Preserve the verified JWT identity source when it differs from the local DataDam source, so Account/Admin can resolve external identities.
  • Keep strict issuer, audience, purpose, signature, expiry and nonblank source validation; desktop access-token source checks remain unchanged.
  • Cover external source and subject during code exchange and reject invalid source claims.

Companion: dbeaver/datadam#144. Merge this API PR first.

Verification

  • ../dbeaver-common/mvnw -f aggregate/pom.xml -pl :com.dbeaver.datadam.server.account -am -Dtest=DDCentralSsoServiceTest,DDSsoServiceTest -Dsurefire.failIfNoSpecifiedTests=false test (passed).

@alexander-skoblikov
alexander-skoblikov merged commit 2578cca into devel Oct 15, 2026
3 checks passed
@alexander-skoblikov
alexander-skoblikov deleted the dbeaver/pro#11123-use-email-for-external-sso-source branch October 15, 2026 13:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants