make default claim config check stricter

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>
nextcloud · Jun 20, 2024 · d5047f1 · d5047f1
1 parent 1023ea2
commit d5047f1
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/lib/Controller/LoginController.php b/lib/Controller/LoginController.php
@@ -256,8 +256,7 @@ public function login(int $providerId, string $redirectUrl = null) {
 
 		// by default: default claims are ENABLED
 		// default claims are historically for quota, email, displayName and groups
-		$isDefaultClaimsEnabled = !isset($oidcSystemConfig['enable_default_claims'])
-			|| in_array($oidcSystemConfig['enable_default_claims'], [true, 'true', 1, '1'], true);
+		$isDefaultClaimsEnabled = !isset($oidcSystemConfig['enable_default_claims']) || $oidcSystemConfig['enable_default_claims'] !== false;
 		if ($isDefaultClaimsEnabled) {
 			// default claims for quota, email, displayName and groups is ENABLED
 			$emailAttribute = $this->providerService->getSetting($providerId, ProviderService::SETTING_MAPPING_EMAIL, 'email');