core: add limit of 20 to group recursion

closes #3116 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-06-19 21:24:57 +02:00
parent 29d3db5112
commit 0d96e68c1e
4 changed files with 35 additions and 13 deletions
--- a/website/docs/releases/v2022.7.md
+++ b/website/docs/releases/v2022.7.md
@ -9,6 +9,11 @@ slug: "2022.7"

    Instead, create an OAuth Source with the certificate configured as JWKS Data, and enable the source in the provider.

+-   Maximum Limit of group recursion
+
+    In earlier versions, cyclic group relations can lead to a deadlock when one of groups in the relationship are bound to an application/flow/etc.
+    This is now limited to 20 levels of recursion.
+
 ## New features

 -   User paths