fix(security): let OperationCanceledException propagate from login role merge (review)
This commit is contained in:
@@ -93,7 +93,7 @@ public static class AuthEndpoints
|
|||||||
var dbRows = await roleMappings.GetByGroupsAsync(result.Groups, ct);
|
var dbRows = await roleMappings.GetByGroupsAsync(result.Groups, ct);
|
||||||
roles = RoleMapper.Merge(result.Roles, dbRows);
|
roles = RoleMapper.Merge(result.Roles, dbRows);
|
||||||
}
|
}
|
||||||
catch (Exception ex)
|
catch (Exception ex) when (ex is not OperationCanceledException)
|
||||||
{
|
{
|
||||||
// A DB hiccup must never block sign-in — fall back to the appsettings baseline roles.
|
// A DB hiccup must never block sign-in — fall back to the appsettings baseline roles.
|
||||||
http.RequestServices.GetService<ILoggerFactory>()?
|
http.RequestServices.GetService<ILoggerFactory>()?
|
||||||
|
|||||||
Reference in New Issue
Block a user