Merge pull request #652 from DragonDuck24/oidc-check-require-email-verification
fix: Make oidc check if email verification is required
This commit is contained in:
@@ -2773,7 +2773,8 @@ impl AuthApplicationService {
|
||||
};
|
||||
|
||||
let provider_name = oidc.provider_name().to_string();
|
||||
// Check email_verified - only if email is present in claims
|
||||
// Check email_verified - only if email is present in claims, and email verification is required.
|
||||
if self.require_verified_email() {
|
||||
if let Some(email) = &claims.email {
|
||||
let verified = claims.email_verified.unwrap_or(false);
|
||||
if !verified {
|
||||
@@ -2789,6 +2790,7 @@ impl AuthApplicationService {
|
||||
));
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// 4. Determine username and email
|
||||
let oidc_username = claims
|
||||
|
||||
Reference in New Issue
Block a user