security fix; per github security

stephenkiers · stephenkiers · commit b4d5158731fd · 2025-11-26T13:39:41.000-08:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -21,8 +21,6 @@ Changes can also be flagged with a GitHub label for tracking purposes. The URL o
 
 ## [Unreleased](https://github.com/ethyca/fides/compare/2.75.1..main)
 
-
-
 ## [2.75.1](https://github.com/ethyca/fides/compare/2.75.0..2.75.1)
 
 ### Added
diff --git a/src/fides/api/schemas/connection_configuration/connection_secrets_okta.py b/src/fides/api/schemas/connection_configuration/connection_secrets_okta.py
@@ -49,7 +49,7 @@ def validate_okta_org_url(cls, value: str) -> str:
                 f"Okta organization URL must be from okta.com domain (got: {parsed.netloc})"
             )
 
-        if "-admin.okta.com" in parsed.netloc:
+        if parsed.hostname and parsed.hostname.endswith("-admin.okta.com"):
             raise ValueError(
                 "Admin organization URLs (-admin.okta.com) are not supported. "
                 "Use your main organization URL (e.g., https://your-org.okta.com)"

Original file line number	Diff line number	Diff line change
`@@ -49,7 +49,7 @@ def validate_okta_org_url(cls, value: str) -> str:`
`49`	`49`	`f"Okta organization URL must be from okta.com domain (got: {parsed.netloc})"`
`50`	`50`	`)`
`51`	`51`
`52`		`- if "-admin.okta.com" in parsed.netloc:`
	`52`	`+ if parsed.hostname and parsed.hostname.endswith("-admin.okta.com"):`
`53`	`53`	`raise ValueError(`
`54`	`54`	`"Admin organization URLs (-admin.okta.com) are not supported. "`
`55`	`55`	`"Use your main organization URL (e.g., https://your-org.okta.com)"`