Prevent deleted users from logging in

This commit is contained in:
Francesco Siddi 2020-07-24 12:45:06 +02:00
parent 4e21b41ba6
commit b969854592

View File

@ -72,6 +72,9 @@ def oauth_callback(provider):
# Find or create user # Find or create user
user_info = {'id': oauth_user.id, 'email': oauth_user.email, 'full_name': ''} user_info = {'id': oauth_user.id, 'email': oauth_user.email, 'full_name': ''}
db_user = find_user_in_db(user_info, provider=provider) db_user = find_user_in_db(user_info, provider=provider)
if '_deleted' in db_user and db_user['_deleted'] is True:
log.debug('User has been deleted and will not be logge in')
return redirect(next_after_login)
db_id, status = upsert_user(db_user) db_id, status = upsert_user(db_user)
# TODO(Sybren): If the user doesn't have any badges, but the access token # TODO(Sybren): If the user doesn't have any badges, but the access token