feat: don't allow SAML user to reset password

2025-08-28 14:27:05 +05:30
parent 5f0feae688
commit ecc1857f63
1 changed files with 10 additions and 0 deletions
@@ -3,6 +3,7 @@ class DeviseOverrides::PasswordsController < Devise::PasswordsController

  skip_before_action :require_no_authentication, raise: false
  skip_before_action :authenticate_user!, raise: false
+  before_action :check_saml_user, only: [:create]

  def create
    @user = User.from_email(params[:email])
@@ -43,4 +44,13 @@ class DeviseOverrides::PasswordsController < Devise::PasswordsController
      message: message
    }, status: status
  end
+
+  def check_saml_user
+    return if params[:email].blank?
+
+    user = User.from_email(params[:email])
+    return unless user&.saml_user?
+
+    build_response(I18n.t('messages.reset_password_saml_user'), 403)
+  end
 end