security fix; per github security

stephenkiers · stephenkiers · commit 8f989b269a52 · 2025-11-26T13:37:20.000-08:00
diff --git a/src/fides/api/schemas/connection_configuration/connection_secrets_okta.py b/src/fides/api/schemas/connection_configuration/connection_secrets_okta.py
@@ -49,7 +49,7 @@ def validate_okta_org_url(cls, value: str) -> str:
                 f"Okta organization URL must be from okta.com domain (got: {parsed.netloc})"
             )
 
-        if "-admin.okta.com" in parsed.netloc:
+        if parsed.hostname and parsed.hostname.endswith("-admin.okta.com"):
             raise ValueError(
                 "Admin organization URLs (-admin.okta.com) are not supported. "
                 "Use your main organization URL (e.g., https://your-org.okta.com)"

Original file line number	Diff line number	Diff line change
`@@ -49,7 +49,7 @@ def validate_okta_org_url(cls, value: str) -> str:`
`49`	`49`	`f"Okta organization URL must be from okta.com domain (got: {parsed.netloc})"`
`50`	`50`	`)`
`51`	`51`
`52`		`- if "-admin.okta.com" in parsed.netloc:`
	`52`	`+ if parsed.hostname and parsed.hostname.endswith("-admin.okta.com"):`
`53`	`53`	`raise ValueError(`
`54`	`54`	`"Admin organization URLs (-admin.okta.com) are not supported. "`
`55`	`55`	`"Use your main organization URL (e.g., https://your-org.okta.com)"`