cjw/Oxicloud
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Merge pull request #652 from DragonDuck24/oidc-check-require-email-verification

Browse Source 
fix: Make oidc check if email verification is required
This commit is contained in:
Dionisio Pozo
2026-08-01 00:12:33 +02:00
committed by GitHub
parent 8ba2d81297 1801150ad4
commit 0c6a33c721
1 changed files with 16 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/application/services/auth_application_service.rs
+16 -14
View File
@@ -2773,20 +2773,22 @@ impl AuthApplicationService {
}; };
let provider_name = oidc.provider_name().to_string(); let provider_name = oidc.provider_name().to_string();
// Check email_verified - only if email is present in claims // Check email_verified - only if email is present in claims, and email verification is required.
if let Some(email) = &claims.email { if self.require_verified_email() {
let verified = claims.email_verified.unwrap_or(false); if let Some(email) = &claims.email {
if !verified { let verified = claims.email_verified.unwrap_or(false);
tracing::warn!( if !verified {
"OIDC login rejected: email not verified (provider: {}, email: {})", tracing::warn!(
provider_name, "OIDC login rejected: email not verified (provider: {}, email: {})",
email provider_name,
); email
return Err(DomainError::new( );
ErrorKind::AccessDenied, return Err(DomainError::new(
"OIDC", ErrorKind::AccessDenied,
"Email verification required. Please verify your email at the identity provider.", "OIDC",
)); "Email verification required. Please verify your email at the identity provider.",
));
}
} }
} }