Don't further setup disabled users when logging in with apache

Signed-off-by: Joas Schilling <coding@schilljs.com>
pull/28939/head
Joas Schilling 2021-09-23 11:19:02 +07:00
parent 344ffcc9b6
commit 57a816a1a6
No known key found for this signature in database
GPG Key ID: 7076EA9751AACDDA
1 changed files with 6 additions and 0 deletions

@ -35,6 +35,8 @@
* along with this program. If not, see <http://www.gnu.org/licenses/>
*
*/
use OC\User\LoginException;
use OCP\EventDispatcher\IEventDispatcher;
use OCP\ILogger;
use OCP\IUserManager;
@ -170,6 +172,10 @@ class OC_User {
if (self::getUser() !== $uid) {
self::setUserId($uid);
$userSession = \OC::$server->getUserSession();
if ($userSession->getUser() && !$userSession->getUser()->isEnabled()) {
$message = \OC::$server->getL10N('lib')->t('User disabled');
throw new LoginException($message);
}
$userSession->setLoginName($uid);
$request = OC::$server->getRequest();
$userSession->createSessionToken($request, $uid, $uid);