scriptoriumadmin/fabro
1
0
Fork 0
mirror of https://github.com/fabro-sh/fabro.git synced 2026-09-09 22:33:37 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Fix JWT sub claim to use GitHub profile URL instead of API URL

Browse source 
The sub claim was set to https://api.github.com/user/{id} (numeric ID),
but the API-side username extractor splits on '/' expecting a login name.
Use https://github.com/{login} so the extracted segment matches the
allowed_usernames config.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Bryan Helmkamp 2026-03-03 16:41:33 -05:00
parent fca63cb2e7
commit 518b6ab9ac
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apps/arc-web/app/routes/auth-callback.tsx
View file

@ -49,7 +49,7 @@ export async function loader({ request }: Route.LoaderArgs) {
}
const session = await getSession(request);
session.set("userUrl", `https://api.github.com/user/${profile.id}`);
session.set("userUrl", `https://github.com/${profile.login}`);
session.set("githubId", profile.id);
session.set("githubNodeId", profile.node_id);
session.set("githubLogin", profile.login);