OAuth: deny login for disabled users (#17957)

6 years ago · 48d5a1bcd3
parent b1a0bd115c
commit 48d5a1bcd3
1 changed files with 5 additions and 0 deletions
--- a/pkg/api/login_oauth.go
+++ b/pkg/api/login_oauth.go
@ -191,6 +191,11 @@ func (hs *HTTPServer) OAuthLogin(ctx *m.ReqContext) {
 		return
 	}

+	if cmd.Result.IsDisabled {
+		hs.redirectWithError(ctx, login.ErrUserDisabled)
+		return
+	}
+
 	// login
 	hs.loginUserWithUser(cmd.Result, ctx)