[JBEAP-26098] CVE-2023-6236 wildfly: JBoss EAP: OIDC app attempting to access the second tenant, the user should be prompted to log#2130

Merged

ivassile merged 2 commits intowildfly-security:1.15.xfrom ivassile:JBEAP-26098

Apr 22, 2024

+539-31

Commits on Apr 18, 2024

[JBEAP-26097] CVE-2023-6236 : Compare the provider-url for a cached account against the provider-url required for a request to determine if a cached token can be used

fjuma
authored and
ivassile
committed
[JBEAP-26097] CVE-2023-6236 : Add tests for multi-tenancy to ensure that

fjuma
authored and
ivassile
committed