clone/vikunja
1
0
Fork 0
mirror of https://github.com/go-vikunja/vikunja.git synced 2026-04-29 16:36:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(auth): reject disabled/locked users in OIDC callback

Browse Source
This commit is contained in:
kolaente
2026-03-23 12:24:31 +01:00
committed by kolaente
parent ea4ba18def
commit 22a4b6fbb8
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
pkg/modules/auth/openid/openid.go
View File

@@ -158,6 +158,11 @@ func HandleCallback(c *echo.Context) error {
return err
}
if u.Status == user.StatusDisabled || u.Status == user.StatusAccountLocked {
_ = s.Rollback()
return &user.ErrAccountDisabled{UserID: u.ID}
}
teamData := getTeamDataFromToken(cl.VikunjaGroups, provider)
err = models.SyncExternalTeamsForUser(s, u, teamData, idToken.Issuer, "OIDC")