OAuth: deny login for disabled users (#17957)

48d5a1bc · Alexander Zobnin · Torkel Ödegaard · b1a0bd11 · 48d5a1bc
Commit 48d5a1bc authored Jul 05, 2019 by Alexander Zobnin Committed by Torkel Ödegaard Jul 05, 2019
Show whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

pkg/api/login_oauth.go
+5 -0

No files found.
--- a/pkg/api/login_oauth.go
+++ b/pkg/api/login_oauth.go
@@ -191,6 +191,11 @@ func (hs *HTTPServer) OAuthLogin(ctx *m.ReqContext) {
 		return
 	}

+	if cmd.Result.IsDisabled {
+		hs.redirectWithError(ctx, login.ErrUserDisabled)
+		return
+	}
+
 	// login
 	hs.loginUserWithUser(cmd.Result, ctx)