vikunja/pkg/modules
kolaente fd452b9cb6 fix(auth): skip profile updates for disabled LDAP users
When a disabled/locked LDAP user authenticates, return early from
getOrCreateLdapUser without updating their profile info or syncing
avatar. The login handler already rejects them, but this avoids
unnecessary database writes.

Ref: GHSA-94xm-jj8x-3cr4
2026-03-23 16:37:26 +00:00
..
auth fix(auth): skip profile updates for disabled LDAP users 2026-03-23 16:37:26 +00:00
avatar chore(lint): suppress additional gosec false positives 2026-03-23 16:40:07 +01:00
background chore(lint): suppress gosec false positives on SSRF-safe HTTP client calls 2026-03-23 16:34:22 +00:00
dump chore(lint): suppress known gosec false positives 2026-03-23 16:23:15 +01:00
keyvalue feat: add keyvalue.Remember function 2025-07-17 16:19:13 +02:00
migration chore(lint): suppress gosec false positives on SSRF-safe HTTP client calls 2026-03-23 16:34:22 +00:00