Adrián PeñaandPepe Fagoaga bf3b5c2ba7 Merge commit from fork ...

* fix(saml): cross-tenant account takeover via SAML domain claiming

* chore(changelog): add PR #

* fix(api): bind SAML tokens to validated domain

- Reject SAML assertions with mismatched email domains
- Issue SAML tokens from the validated ACS tenant
- Add regression coverage for cross-tenant SAML token issuance

* fix(api): resolve SAML tenant inside RLS context

- Load the SAML tenant relation before leaving the RLS transaction
- Avoid lazy tenant lookups during the SAML ACS finish flow

---------

Co-authored-by: Pepe Fagoaga <pepe@prowler.com>

2026-06-19 13:38:51 +02:00

..

backend

Merge commit from fork

2026-06-19 13:38:51 +02:00

__init__.py

chore(api): Merge API repository

2024-11-25 13:12:54 +01:00