When a disabled/locked LDAP user authenticates, return early from getOrCreateLdapUser without updating their profile info or syncing avatar. The login handler already rejects them, but this avoids unnecessary database writes. Ref: GHSA-94xm-jj8x-3cr4 |
||
|---|---|---|
| .. | ||
| auth | ||
| avatar | ||
| background | ||
| dump | ||
| keyvalue | ||
| migration | ||