bircni c43eb7c33a

fix(auth): do not auto-reactivate disabled users on OAuth2 callback (#38009) ...

The OAuth2 sign-in callback unconditionally set IsActive=true on the
local user row whenever the IdP authenticated them, silently undoing an
administrator's "Disable Account" action and granting the user a fresh
session in the same response. Treat the local IsActive flag as an
authoritative admin override: inactive users get a session and are
routed through the existing activate / prohibit-login pages by
verifyAuthWithOptions, matching the local-credentials sign-in path.

Adds an integration regression test that disables a linked local user
and asserts the row stays IsActive=false after a full OIDC callback.

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-06-06 22:07:47 +00:00

..

actions

feat(actions)!: improve support for reusable workflows (#37478)

2026-05-30 08:31:14 +02:00

activities

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

admin

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

asymkey

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

auth

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

avatars

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

db

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

dbfs

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

fixtures

Improve testing init, clean up webhook tests (#37412)

2026-04-25 18:55:18 +00:00

git

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issues

chore(deps): update chroma, regexp2 v2, replace dimiro1/reply (#37858)

2026-05-27 23:39:57 +02:00

migrations

feat(actions)!: improve support for reusable workflows (#37478)

2026-05-30 08:31:14 +02:00

organization

feat(orgs): Add search bar for organization members tab page (#37347)

2026-06-01 20:16:04 +00:00

packages

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

perm

feat(actions)!: improve support for reusable workflows (#37478)

2026-05-30 08:31:14 +02:00

project

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

pull

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

renderhelper

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo

fix(ui): keep actions run title intact when subject contains an issue ref (#38005)

2026-06-06 11:00:14 +02:00

secret

feat(actions)!: improve support for reusable workflows (#37478)

2026-05-30 08:31:14 +02:00

shared/types

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

system

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

unit

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

unittest

fix(auth): do not auto-reactivate disabled users on OAuth2 callback (#38009)

2026-06-06 22:07:47 +00:00

user

fix(auth): ignore stale OIDC external login links to organizations (#37875)

2026-05-30 20:37:09 +00:00

webhook

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

main_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00