awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-04 16:26:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #4446 from Infisical/fix/selectOrgSamlEnforced

Browse Source 
Check token source before throwing an error for auth enforced scenarios
This commit is contained in:
carlosmonastyrski
2025-08-31 13:49:09 -03:00
committed by GitHub
parent 5fffa17c30 41404148e1
commit 3bb0c9b3ad
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/auth/auth-login-service.ts
+7 -3
View File
@@ -453,10 +453,14 @@ export const authLoginServiceFactory = ({
const selectedOrg = await orgDAL.findById(organizationId); const selectedOrg = await orgDAL.findById(organizationId);
// Check if authEnforced is true, if that's the case, throw an error // Check if authEnforced is true and the current auth method is not an enforced method
if (selectedOrg.authEnforced) { if (
selectedOrg.authEnforced &&
!isAuthMethodSaml(decodedToken.authMethod) &&
decodedToken.authMethod !== AuthMethod.OIDC
) {
throw new BadRequestError({ throw new BadRequestError({
message: "Authentication is required by your organization before you can log in." message: "Login with the auth method required by your organization."
}); });
} }