From d8917e118b774d3f3b1533cf225ce27b0131fbcb Mon Sep 17 00:00:00 2001 From: Henrik Hautakoski Date: Tue, 13 Jul 2021 18:47:24 +0200 Subject: [PATCH] app/Http/Controllers/Auth/OAuthController.php: check trashed records before trying to login via oauth. --- app/Http/Controllers/Auth/OAuthController.php | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/app/Http/Controllers/Auth/OAuthController.php b/app/Http/Controllers/Auth/OAuthController.php index d6c4aad..6e2a867 100644 --- a/app/Http/Controllers/Auth/OAuthController.php +++ b/app/Http/Controllers/Auth/OAuthController.php @@ -30,6 +30,12 @@ class OAuthController extends Controller { $oauth = Socialite::driver($driver)->stateless()->user(); + // Check that account is not deleted before trying to find/create user and login. + if (User::onlyTrashed()->where("{$driver}_id", $oauth->getId())->first()) { + return redirect('/') + ->with(['error' => "Account suspended."]); + } + $user = User::firstOrCreate([ "{$driver}_id" => $oauth->getId() ], [ 'username' => $oauth->getNickname() ]);