diff --git a/gso/auth/oidc_policy_helper.py b/gso/auth/oidc_policy_helper.py index 005e6cd4a5e6b292613f9612d350ddc73f5f0ba1..04e2fc8e5ec419fb5f80a6a5646bb3429512cad9 100644 --- a/gso/auth/oidc_policy_helper.py +++ b/gso/auth/oidc_policy_helper.py @@ -411,6 +411,9 @@ def opa_decision( if not (oauth2lib_settings.OAUTH2_ACTIVE and oauth2lib_settings.OAUTH2_AUTHORIZATION_ACTIVE): return None + if _is_callback_step_endpoint(request): + return None + try: json = await request.json() # Silencing the Decode error or Type error when request.json() does not return anything sane.