mirror of
https://github.com/glitch-soc/mastodon.git
synced 2024-11-23 16:44:04 -05:00
Prevent different identities from a same SSO provider from accessing a same account
This commit is contained in:
parent
d509dda192
commit
e61e801148
@ -51,7 +51,7 @@ module Omniauthable
|
||||
|
||||
user = User.find_by(email: email) if email_is_verified
|
||||
|
||||
return user unless user.nil?
|
||||
return user unless user.nil? && !Identity.exists?(provider: auth.provider, user_id: user.id)
|
||||
|
||||
user = User.new(user_params_from_auth(email, auth))
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user