Merge pull request from GHSA-7cmh-wm9h-j63f

This commit is contained in:
David Taylor
2019-08-27 17:11:19 +01:00
committed by Jeff Atwood
parent 03d51d6519
commit 8e5a8d1d54
2 changed files with 21 additions and 2 deletions

View File

@ -134,7 +134,10 @@ class Users::OmniauthCallbacksController < ApplicationController
user.email_tokens.create!(email: user.email)
end
user.activate
if !user.active || !user.email_confirmed?
user.password = SecureRandom.hex
user.activate
end
user.update!(registration_ip_address: request.remote_ip) if user.registration_ip_address.blank?
end