Skip to content

Improvement/add logic if user read scope not available#72

Open
jbrauer197 wants to merge 4 commits intoWeird-Sheep-Labs:mainfrom
jbrauer197:improvement/add_logic_if_user_read_scope_not_available
Open

Improvement/add logic if user read scope not available#72
jbrauer197 wants to merge 4 commits intoWeird-Sheep-Labs:mainfrom
jbrauer197:improvement/add_logic_if_user_read_scope_not_available

Conversation

@jbrauer197
Copy link

@jbrauer197 jbrauer197 commented Jan 22, 2026

Hi Armand,

as discussed: Here is the pull request to add the functionality to skip calling the

  • added the logic to handlers.py
  • added two tests to test_handlers.py to test whether setting SCOPES to [] then triggers skipping the call to the _get_azure_user() method (which apparently requires the "User.Read" scope since it apparently reads the user s profile.

Reason for this pull request: For (unknown to me) security reasons our company no longer gives us the "User.Read" permission when registering an application for SSO / OIDC in the MS Entra ID registration.

Last commit: Reformatted with line length 88 to keep the existing formatting so that "files changed" does not show formatting changes

Thx...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant