When a disabled/locked LDAP user authenticates, return early from getOrCreateLdapUser without updating their profile info or syncing avatar. The login handler already rejects them, but this avoids unnecessary database writes. Ref: GHSA-94xm-jj8x-3cr4 |
||
|---|---|---|
| .. | ||
| ldap.go | ||
| ldap_test.go | ||
| main_test.go | ||