Amir Zarrinkafsh 7edaaf3b56 fix(oidc): handle concurrent creation of the user opaque identifier (#13296) ...

`GenerateOpaqueUserID` loaded the opaque identifier for a user and
sector and inserted a new one when none existed, with nothing guarding
the gap between the two. Two first time authorizations for the same user
and sector which arrived together both found no identifier, and the
second insert failed on the unique constraint over `service`,
`sector_id` and `username`, which ended its authorization with
`ErrSubjectCouldNotLookup`. The `OIDCConformance` suite hits this
whenever its plans authorize `john` in the same instant, which shows up
as `duplicate key value violates unique constraint
"user_opaque_identifier_service_sector_id_username_key"` in the
PostgreSQL log.

When the insert fails on a unique constraint the identifier which won is
now loaded and returned, so every request resolves the same subject.
`storage.IsUniqueConstraintViolation` recognizes the violation on
SQLite, MySQL and PostgreSQL.

Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>

2026-09-29 03:48:52 +00:00

..

conformance

test(suites): oidc conformance (#13097)

2026-09-12 11:56:33 +00:00

claims_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

claims.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

client_credentials_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

client_credentials.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

client_policy_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

client_policy.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

client_test.go

fix(oidc): allow conformant alg none jarm (#13110)

2026-09-11 05:29:03 +00:00

client.go

fix(oidc): allow conformant alg none jarm (#13110)

2026-09-11 05:29:03 +00:00

config_test.go

build(deps): update module authelia.com/provider/oauth2 to v0.3.3 (#13217)

2026-09-19 14:44:51 +00:00

config.go

build(deps): update module authelia.com/provider/oauth2 to v0.3.3 (#13217)

2026-09-19 14:44:51 +00:00

const_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

const.go

build(deps): update module authelia.com/provider/oauth2 to v0.3.3 (#13217)

2026-09-19 14:44:51 +00:00

discovery_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

discovery.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

doc.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

errors_test.go

fix(handlers): use correct status code for consent redirects (#13155)

2026-09-14 13:17:45 +00:00

errors.go

fix(handlers): use correct status code for consent redirects (#13155)

2026-09-14 13:17:45 +00:00

issuer_algorithms_mldsa_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

issuer_algorithms_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

issuer_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

issuer.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

mldsa_stub.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

mldsa.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

provider_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

provider.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

session_test.go

build(deps): update module authelia.com/provider/oauth2 to v0.3.2 (#13087)

2026-09-10 12:21:52 +00:00

session.go

build(deps): update module authelia.com/provider/oauth2 to v0.3.2 (#13087)

2026-09-10 12:21:52 +00:00

store_test.go

fix(oidc): handle concurrent creation of the user opaque identifier (#13296)

2026-09-29 03:48:52 +00:00

store.go

fix(oidc): handle concurrent creation of the user opaque identifier (#13296)

2026-09-29 03:48:52 +00:00

subject_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

subject.go

feat(configuration): template delimiters (#11907)

2026-09-27 11:15:40 +00:00

types_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

types.go

fix(oidc): allow conformant alg none jarm (#13110)

2026-09-11 05:29:03 +00:00

util_blackbox_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

util_test.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00

util.go

docs: add license headers to internal (2/3) (#13054)

2026-09-09 06:56:51 +00:00