awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-03 22:26:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

Restrict changing user auth methods if SAML SSO is enforced

Browse Source
This commit is contained in:
Tuan Dang
2023-07-23 15:19:17 +07:00
parent 3fba1b3ff7
commit fcdfa424bc
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/controllers/v2/usersController.ts
+5
View File
@@ -4,6 +4,7 @@ import crypto from "crypto";
import bcrypt from "bcrypt"; import bcrypt from "bcrypt";
import { import {
APIKeyData, APIKeyData,
AuthProvider,
MembershipOrg, MembershipOrg,
TokenVersion, TokenVersion,
User User
@@ -121,6 +122,10 @@ export const updateAuthProvider = async (req: Request, res: Response) => {
const { const {
authProvider authProvider
} = req.body; } = req.body;
if (req.user?.authProvider === AuthProvider.OKTA_SAML) return res.status(400).send({
message: "Failed to update user authentication method because SAML SSO is enforced"
});
const user = await User.findByIdAndUpdate( const user = await User.findByIdAndUpdate(
req.user._id.toString(), req.user._id.toString(),