mirror of
https://github.com/discourse/discourse.git
synced 2025-05-28 22:08:01 +08:00
FIX: Return a 404 if the auth session is not present
This commit is contained in:
@ -31,6 +31,8 @@ class Users::OmniauthCallbacksController < ApplicationController
|
||||
|
||||
def complete
|
||||
auth = request.env["omniauth.auth"]
|
||||
raise Discourse::NotFound unless request.env["omniauth.auth"]
|
||||
|
||||
auth[:session] = session
|
||||
|
||||
authenticator = self.class.find_authenticator(params[:provider])
|
||||
|
Reference in New Issue
Block a user