From 613c45c7af285b9194f5557f828fba9d5dbbdc57 Mon Sep 17 00:00:00 2001 From: John Flatness Date: Mon, 22 Aug 2022 15:53:50 -0400 Subject: [PATCH] Don't allow inactive users to continue sessions --- application/src/Authentication/Storage/DoctrineWrapper.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/application/src/Authentication/Storage/DoctrineWrapper.php b/application/src/Authentication/Storage/DoctrineWrapper.php index cced4b0a40..cb7261a42a 100644 --- a/application/src/Authentication/Storage/DoctrineWrapper.php +++ b/application/src/Authentication/Storage/DoctrineWrapper.php @@ -53,7 +53,7 @@ public function read() $identity = $this->storage->read(); if ($identity) { try { - return $this->repository->find($identity); + return $this->repository->findOneBy(['id' => $identity, 'isActive' => true]); } catch (DBALException $e) { // The user table does not exist. return null;