mirror of
https://github.com/project-zot/zot.git
synced 2026-06-17 12:58:02 +08:00
002ac62d8a
GHSA-c9p4-xwr9-rfhx authN/authZ creds are added to the request context so that they can be tracked and enforced in the various subsystems. However, it was previously a appended list (incorrectly); consequently, even if the user has been removed from the group configuration, the user could still log in. Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com>