(delint: Is this a less messy rule?)

This commit is contained in:
Olivier 'reivilibre
2025-12-01 11:51:51 +00:00
parent 8f523e3959
commit 673cfa004c
+6 -6
View File
@@ -14,12 +14,6 @@ import data.common
default allow := false
is_interactive if {
# Only `m.login.sso` (the interactive web form) is interactive;
# `m.login.password` and `m.login.token` (including the finalisation of an SSO login) are not
input.login.type == "m.login.sso"
}
allow if {
count(violation) == 0
}
@@ -72,3 +66,9 @@ violation contains {
# sessions to return under the limit.
data.session_limit.hard_limit <= input.session_counts.total
}
is_interactive if {
# Only `m.login.sso` (the interactive web form) is interactive;
# `m.login.password` and `m.login.token` (including the finalisation of an SSO login) are not
input.login.type == "m.login.sso"
}