FIX: SSO code should respect IP address filters

2025-05-21 18:12:32 +08:00 · 2015-02-23 15:58:45 -05:00
parent d63aed69f7
commit ca5730018a
6 changed files with 33 additions and 15 deletions
--- a/app/controllers/admin/users_controller.rb
+++ b/app/controllers/admin/users_controller.rb
@ -273,7 +273,7 @@ class Admin::UsersController < Admin::AdminController
    return render nothing: true, status: 404 unless SiteSetting.enable_sso

    sso = DiscourseSingleSignOn.parse("sso=#{params[:sso]}&sig=#{params[:sig]}")
-    user = sso.lookup_or_create_user
+    user = sso.lookup_or_create_user(request.remote_ip)

    render_serialized(user, AdminDetailedUserSerializer, root: false)
  end