1
0
Fork 1
Spiegel von https://github.com/dani-garcia/vaultwarden.git synchronisiert 2024-06-28 10:15:41 +02:00

Make org owner invitations respect the email domain whitelist

This closes a loophole where org owners can invite new users from any domain.
Dieser Commit ist enthalten in:
Jeremy Lin 2020-04-09 01:51:05 -07:00
Ursprung c2a324e5da
Commit e4d08836e2

Datei anzeigen

@ -485,7 +485,11 @@ fn send_invite(org_id: String, data: JsonUpcase<InviteData>, headers: AdminHeade
let user = match User::find_by_mail(&email, &conn) {
None => {
if !CONFIG.invitations_allowed() {
err!(format!("User email does not exist: {}", email))
err!(format!("User does not exist: {}", email))
}
if !CONFIG.signups_domains_whitelist().is_empty() && !CONFIG.is_email_domain_whitelisted(&email) {
err!("Email domain not eligible for invitations")
}
if !CONFIG.mail_enabled() {