mirrors
/
mastodon-glitch
mirror of https://github.com/glitch-soc/mastodon
3
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Prevent different identities from a same SSO provider from accessing a same account

glitch-soc/security/18856371be8603b7f720afaf8500b656c4667573
Claire 2024-02-09 14:38:32 +01:00
parent 823d0806bc
commit 238d671908
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/models/concerns/omniauthable.rb
View File

@ -51,7 +51,7 @@ module Omniauthable
user = User.find_by(email: email) if email_is_verified user = User.find_by(email: email) if email_is_verified
return user unless user.nil? return user unless user.nil? && !Identity.exists?(provider: auth.provider, user_id: user.id)
user = User.new(user_params_from_auth(email, auth)) user = User.new(user_params_from_auth(email, auth))