fix(security): let OperationCanceledException propagate from login role merge (review)

2026-05-29 09:56:09 -04:00
parent a58151e99e
commit 4df5b849ac
1 changed files with 1 additions and 1 deletions
@@ -93,7 +93,7 @@ public static class AuthEndpoints
            var dbRows = await roleMappings.GetByGroupsAsync(result.Groups, ct);
            roles = RoleMapper.Merge(result.Roles, dbRows);
        }
-        catch (Exception ex)
+        catch (Exception ex) when (ex is not OperationCanceledException)
        {
            // A DB hiccup must never block sign-in — fall back to the appsettings baseline roles.
            http.RequestServices.GetService<ILoggerFactory>()?