Check if user is authorized to access an application before authenticating him

2022-04-09 12:24:03 +02:00
parent b10215ae9c
commit 5633aae029
2 changed files with 6 additions and 2 deletions
--- a/src/controllers/openid_controller.rs
+++ b/src/controllers/openid_controller.rs
@ -111,7 +111,11 @@ pub async fn authorize(user: CurrentUser, query: web::Query<AuthorizeQuery>,
        (_, _) => None
    };

-    // TODO : Check if user is authorized to access the application
+    // Check if user is authorized to access the application
+    if !user.can_access_app(&client.id) {
+        return error_redirect(&query, "invalid_request",
+                              "User is not authorized to access this application!");
+    }

    // Save all authentication information in memory
    let session = Session {