vikunja/pkg/modules/auth
kolaente fd452b9cb6 fix(auth): skip profile updates for disabled LDAP users
When a disabled/locked LDAP user authenticates, return early from
getOrCreateLdapUser without updating their profile info or syncing
avatar. The login handler already rejects them, but this avoids
unnecessary database writes.

Ref: GHSA-94xm-jj8x-3cr4
2026-03-23 16:37:26 +00:00
..
ldap fix(auth): skip profile updates for disabled LDAP users 2026-03-23 16:37:26 +00:00
openid fix(openid): Merge VikunjaGroups and ExtraSettingsLinks from userinfo 2026-03-23 16:11:17 +00:00
auth.go fix(auth): make SameSite=None conditional on HTTPS for refresh cookie 2026-03-03 10:41:19 +01:00