vikunja/pkg/modules/auth/ldap
kolaente fd452b9cb6 fix(auth): skip profile updates for disabled LDAP users
When a disabled/locked LDAP user authenticates, return early from
getOrCreateLdapUser without updating their profile info or syncing
avatar. The login handler already rejects them, but this avoids
unnecessary database writes.

Ref: GHSA-94xm-jj8x-3cr4
2026-03-23 16:37:26 +00:00
..
ldap.go fix(auth): skip profile updates for disabled LDAP users 2026-03-23 16:37:26 +00:00
ldap_test.go fix: use caller's session in LDAP syncUserGroups to avoid nested transactions 2026-02-25 11:03:02 +01:00
main_test.go feat: move to slog for logging 2025-07-21 18:15:39 +02:00