bircni c43eb7c33a

fix(auth): do not auto-reactivate disabled users on OAuth2 callback (#38009) ...

The OAuth2 sign-in callback unconditionally set IsActive=true on the
local user row whenever the IdP authenticated them, silently undoing an
administrator's "Disable Account" action and granting the user a fresh
session in the same response. Treat the local IsActive flag as an
authoritative admin override: inactive users get a session and are
routed through the existing activate / prohibit-login pages by
verifyAuthWithOptions, matching the local-credentials sign-in path.

Adds an integration regression test that disables a linked local user
and asserts the row stays IsActive=false after a full OIDC callback.

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-06-06 22:07:47 +00:00

..

e2e

chore: fix various layout problems (#37983)

2026-06-06 09:24:03 +00:00

fuzz

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

gitea-lfs-meta

…

gitea-repositories-meta

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

integration

fix(auth): do not auto-reactivate disabled users on OAuth2 callback (#38009)

2026-06-06 22:07:47 +00:00

testdata/data

Add artifacts test fixture (#30300)

2024-11-01 10:29:54 +08:00

mssql.ini.tmpl

Refactor integration tests infrastructure (#37462)

2026-04-29 16:37:38 +00:00

mysql.ini.tmpl

Refactor integration tests infrastructure (#37462)

2026-04-29 16:37:38 +00:00

pgsql.ini.tmpl

Refactor integration tests infrastructure (#37462)

2026-04-29 16:37:38 +00:00

sqlite.ini.tmpl

Refactor database connection (#37496)

2026-05-01 15:38:38 +00:00

test_utils.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00