When a disabled/locked LDAP user authenticates, return early from getOrCreateLdapUser without updating their profile info or syncing avatar. The login handler already rejects them, but this avoids unnecessary database writes. Ref: GHSA-94xm-jj8x-3cr4 |
||
|---|---|---|
| .. | ||
| ldap | ||
| openid | ||
| auth.go | ||