From 4c80932b6475ad54a2e2a81541d89a3b8471a762 Mon Sep 17 00:00:00 2001 From: kolaente Date: Fri, 20 Mar 2026 10:07:48 +0100 Subject: [PATCH] fix: block login for StatusAccountLocked users --- pkg/routes/api/v1/login.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/routes/api/v1/login.go b/pkg/routes/api/v1/login.go index 6ce1e3992..26a098caf 100644 --- a/pkg/routes/api/v1/login.go +++ b/pkg/routes/api/v1/login.go @@ -71,7 +71,7 @@ func Login(c *echo.Context) (err error) { } } - if user.Status == user2.StatusDisabled { + if user.Status == user2.StatusDisabled || user.Status == user2.StatusAccountLocked { _ = s.Rollback() return &user2.ErrAccountDisabled{UserID: user.ID} } @@ -244,7 +244,7 @@ func RefreshToken(c *echo.Context) (err error) { return err } - if u.Status == user2.StatusDisabled { + if u.Status == user2.StatusDisabled || u.Status == user2.StatusAccountLocked { if _, err := s.Where("id = ?", session.ID).Delete(&models.Session{}); err != nil { _ = s.Rollback() return err