Global setting "oauth2.plugins.exclude" value is not enforced

Open

#13,859 opened on Aug 12, 2026 1 comment 0 reactions 1 assignee View on GitHub

@Damans227 is already working on this.

Since Aug 12, 2026.

Assessment

This issue has not been assessed yet.

Description

bug

problem

ACS 4.22

versions

ACS 4.22

The steps to reproduce the bug

Register a oauth configuration for google provider
Authentication with google auth succeeds
Update the value of "oauth2.plugins.exclude" to google
Authentication with google auth still succeeds
Restart the management service ( service cloudstack-management restart)
Authentication with google still succeeds

oauth2.plugins= google,github
oauth2.plugins.exclude=google
...

What to do about it?

Authentication with oauth provider should fail if its mentioned in the "oauth2.plugins.exclude"

Dominant language: Java
Stars: 3.1k
Forks: 1.4k
Avg merge: 6d 20h
Merged PRs (30d): 27

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

More from apache/cloudstack

Resize volume API validation errors are not displayed in the UI Open

bug

Difficulty 1/5 Under an hour Newbie friendliness 90/100

apache/cloudstack#14222 · Opened Sep 22, 2026
create-kubernetes-binaries-iso.sh builds the ISO without setting a volume ID on EL8 based os's Open

bug component:kubernetes

Difficulty 1/5 Under an hour Newbie friendliness 88/100

apache/cloudstack#14180 · Opened Sep 16, 2026
Resource fetching missing projectid: "-1" parameter Open

bug component:projects component:UI

Difficulty 1/5 Under an hour Newbie friendliness 88/100

apache/cloudstack#14070 · 5 comments · Opened Sep 7, 2026
Nas backup restore fails if the backup repository mount options have a trailing space Open

component:backup

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

apache/cloudstack#14013 · Opened Aug 31, 2026
KVM agent fails to connect to Ceph RBD storage pool after upgrading Ceph client to Tentacle 20.2.4 Open

bug component:ceph

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/cloudstack#13989 · 3 comments · Opened Aug 27, 2026

All issues in apache/cloudstack

Similar issues

executions.Query — startDate and timeRange filters are sent with inverted comparison operators Open

area/plugin

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

kestra-io/plugin-kestra#190 · Opened Sep 24, 2026
litertlm-android AAR ships no consumer ProGuard rules → "mid == null" SIGABRT in minified apps Open

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

google-ai-edge/LiteRT-LM#3739 · Opened Sep 24, 2026
Add canonical URLs and a sitemap Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

integra-team-red/meet-map#249 · Opened Sep 24, 2026
[Studio][Bug] Cancelled create-user dialog keeps the password and admin switch for the next attempt Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

apache/rocketmq-dashboard#5064 · Opened Sep 24, 2026
Consent portal: creating a duplicate Purpose shows a generic error instead of "already exists" Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

wso2/dpdp-accelerator#287 · Opened Sep 24, 2026

More Java issues

A short digest of beginner-friendly GitHub issues.