Prevent different identities from a same SSO provider from accessing a same account

This commit is contained in:
Claire 2024-02-09 14:38:32 +01:00
parent c1700f9560
commit 9d2553621a

View File

@ -51,7 +51,7 @@ module User::Omniauthable
user = User.find_by(email: email) if email_is_verified
return user unless user.nil?
return user unless user.nil? && !Identity.exists?(provider: auth.provider, user_id: user.id)
user = User.new(user_params_from_auth(email, auth))