From 6dcab6646cac2f80f8704ec934e816d29944a9c3 Mon Sep 17 00:00:00 2001
From: Daniel Hougaard <62331820+DanielHougaard@users.noreply.github.com>
Date: Tue, 13 Feb 2024 14:21:50 +0100
Subject: [PATCH] Make it impossible to log in with the ghost user

---
 backend/src/services/user/user-dal.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/src/services/user/user-dal.ts b/backend/src/services/user/user-dal.ts
index 7b54e7c10..086ad5931 100644
--- a/backend/src/services/user/user-dal.ts
+++ b/backend/src/services/user/user-dal.ts
@@ -23,7 +23,7 @@ export const userDALFactory = (db: TDbClient) => {
   const findUserEncKeyByEmail = async (email: string) => {
     try {
       return await db(TableName.Users)
-        .where({ email })
+        .where({ email, ghost: false })
         .join(TableName.UserEncryptionKey, `${TableName.Users}.id`, `${TableName.UserEncryptionKey}.userId`)
         .first();
     } catch (error) {