mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-10 10:35:51 +00:00
rcourtman
c6fdd9058c
Empty allowedGroups, allowedDomains, allowedEmails, groupsClaim and groupRoleMappings in a provider PUT were silently restored from the existing config, so an admin could never clear them. The guards shielded against lossy round-trips that no longer exist: the detail GET and the flat list response both carry these fields, so an empty value is an intentional clear. Nested OIDC/SAML config and the client secret stay preserved since toggle payloads omit them and secrets are never echoed in reads. Also expose groupsClaim and groupRoleMappings in the shared extensions list response so the enterprise list matches the core one, and make the Settings enable/disable toggle send only writable fields; the old list-item spread included computed response fields that the enterprise strict PUT decoder rejects.