try throwing exception for deactivated user during OAuthlogin

QualitativeDataRepository · May 2, 2024 · ac8eb44 · ac8eb44
1 parent ef340a9
commit ac8eb44
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.../java/edu/harvard/iq/dataverse/authorization/providers/oauth2/OAuth2LoginBackingBean.java b/.../java/edu/harvard/iq/dataverse/authorization/providers/oauth2/OAuth2LoginBackingBean.java
@@ -161,6 +161,9 @@ public void exchangeCodeForToken() throws IOException {
                     } 
                         // login the user and redirect to HOME of intended page (if any).
                         // setUser checks for deactivated users.
+                        if(dvUser.isDeactivated()) {
+                            throw new OAuth2Exception(-1, "", BundleUtil.getStringFromBundle("deactivated.error"));
+                        }
                         session.setUser(dvUser);
                         final OAuth2TokenData tokenData = oauthUser.getTokenData();
                         if (tokenData != null) {