FIX: Prevent all kinds of login in readonly mode (#16743)

This commit is contained in:
Daniel Waterworth
2022-05-13 10:52:01 -05:00
committed by GitHub
parent 7412f665e7
commit 66a04c5cfe
3 changed files with 14 additions and 1 deletions

View File

@ -22,6 +22,7 @@ class Users::OmniauthCallbacksController < ApplicationController
def complete
auth = request.env["omniauth.auth"]
raise Discourse::NotFound unless request.env["omniauth.auth"]
raise Discourse::ReadOnly if @readonly_mode
auth[:session] = session