public-offering
/
cal.pub0.org
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

CAL-1053: Invalidate password to avoid once Google auth is used to merge accounts (#7152) 

* CAL-1053: Invalidate password to avoid once Google auth is used to merge accounts

* remove log
pull/7185/head
Jeremiah Ajayi 2023-02-17 19:59:34 +01:00 committed by GitHub
parent 2698cde311
commit 2c54ea90f9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
apps/web/pages/api/auth/[...nextauth].tsx
View File

@ -507,6 +507,10 @@ export default NextAuth({
existingUserWithEmail.identityProvider === IdentityProvider.CAL &&
(idP === IdentityProvider.GOOGLE || idP === IdentityProvider.SAML)
) {
await prisma.user.update({
where: { email: existingUserWithEmail.email },
data: { password: null },
});
return true;
} else if (existingUserWithEmail.identityProvider === IdentityProvider.CAL) {
return "/auth/error?error=use-password-login";