🐱 Never populate noreply emails from github appservice auth

devlooped · Jun 19, 2024 · a2654b3 · a2654b3
1 parent c2ac80a
commit a2654b3
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/Microsoft/Azure/Functions/AppServiceGitHubAuthenticationExtension.cs b/Microsoft/Azure/Functions/AppServiceGitHubAuthenticationExtension.cs
@@ -146,7 +146,8 @@ await resp.Content.ReadFromJsonAsync<Email[]>() is { Length: > 0 } emails)
                             if (options.Value.VerifiedOnly)
                                 emails = emails.Where(x => x.verified).ToArray();
 
-                            foreach (var email in emails)
+                            // Never add the default noreply email to the claims.
+                            foreach (var email in emails.Where(x => !x.email.EndsWith("noreply.github.com")))
                             {
                                 // Don't duplicate the primary email.
                                 if (primary?.Value != email.email)
@@ -169,4 +170,4 @@ await resp.Content.ReadFromJsonAsync<Email[]>() is { Length: > 0 } emails)
 
         record Email(string email, bool verified);
     }
-}
+}