FIX: Allow access for global keys

This commit is contained in:
Peter Bouda 2024-12-07 12:13:09 +00:00
parent 150128b330
commit c20f123e80

View file

@ -11,7 +11,7 @@ Rails.application.config.to_prepare do
api_key = ApiKey.active.with_key(token).first
allowed = false
if api_key
allowed = api_key.api_key_scopes.any? { |s| s.resource == "scim" || s.action == "access_scim_endpoints" }
allowed = api_key.api_key_scopes.empty? || api_key.api_key_scopes.any? { |s| s.resource == "scim" || s.action == "access_scim_endpoints" }
end
allowed
end