Don't allow inactive users to continue sessions

Daniel-KM · Aug 22, 2022 · 613c45c · 613c45c
1 parent a1c37b1
commit 613c45c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/application/src/Authentication/Storage/DoctrineWrapper.php b/application/src/Authentication/Storage/DoctrineWrapper.php
@@ -53,7 +53,7 @@ public function read()
  $identity = $this->storage->read();
  if ($identity) {
  try {
- return $this->repository->find($identity);
+ return $this->repository->findOneBy(['id' => $identity, 'isActive' => true]);
  } catch (DBALException $e) {
  // The user table does not exist.
  return null;