App allows reset passowrd for disabled users

[Gojo-Taqi]

To Reproduce

1. Disable user
2. Reset password

Scenario 2 :

If we disable the user we can do any of the functionality like a normal user until the user is logged out

Env : prod
user : dineshdummy@apfodishauat
org : apfodishauat

Steps to reproduce :

1. log in to the org with the user (dineshdummy@apfodishauat)
2. Then disable the user in the web app.
3. Again go to the app and do the normal process or sync the user

Expected result: The user should be displayed with an error (eg: sorry the user is disabled please get in touch with the admin)
Actual result: the app is getting synced without any error.

Refrenece video:

Click Here