phil/ezidam
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ezidam: oauth: redirect: check if user is archived

Browse source
This commit is contained in:
Philippe Loctaux 2023-03-18 13:44:17 +01:00
parent e9200f8682
commit 609933d98f
2 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
crates/ezidam/src/error.rs
View file

@ -47,4 +47,8 @@ impl Error {
pub fn bad_request<M: std::fmt::Display>(value: M) -> Self { pub fn bad_request<M: std::fmt::Display>(value: M) -> Self {
Self::new(Status::BadRequest, value) Self::new(Status::BadRequest, value)
} }
pub fn forbidden<M: std::fmt::Display>(value: M) -> Self {
Self::new(Status::Forbidden, value)
}
} }

5
crates/ezidam/src/routes/oauth/redirect.rs
View file

@ -40,6 +40,11 @@ pub async fn redirect_page(
.await? .await?
.ok_or_else(|| Error::not_found("Could not find user"))?; .ok_or_else(|| Error::not_found("Could not find user"))?;
// Check if user is archived
if user.is_archived() {
return Err(Error::forbidden("User is archived"));
}
// Mark code as used // Mark code as used
code.use_code(&mut transaction).await?; code.use_code(&mut transaction).await?;