Unfloyded/Legamunt
0
0
Fork 0
Code Activity

New env variable: SAML_SECURITY_ASSUME_EMAIL_IS_VERIFIED + fixes #6533 (#6538)

Browse source
This commit is contained in:
Ghislain Loaec 2018-02-22 23:31:25 +01:00 • committed by Eugen Rochko
parent b8535ad4df
commit 3084fe4959
3 changed files with 10 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
app/models/concerns/omniauthable.rb
View file

@ -53,8 +53,10 @@ module Omniauthable
private
def user_params_from_auth(auth)
email_is_verified = auth.info.email && (auth.info.verified || auth.info.verified_email)
email = auth.info.email if email_is_verified && !User.exists?(email: auth.info.email)
assume_verified = Devise.omniauth_configs[:saml].strategy.security.assume_email_is_verified
email_is_verified = auth.info.verified || auth.info.verified_email || assume_verified
email = auth.info.verified_email || auth.info.email
email = email_is_verified && !User.exists?(email: auth.info.email) && email
{
email: email ? email : "#{TEMP_EMAIL_PREFIX}-#{auth.uid}-#{auth.provider}.com",