IntenseWebs/pgadmin4
3
0
Fork 0
mirror of https://github.com/pgadmin-org/pgadmin4.git synced 2025-02-25 18:55:31 -06:00
Code Issues Packages Projects Releases Wiki Activity

Fixed an issue where even if the user is locked, he can reset the password and can login into pgAdmin. Fixes #6664

Browse Source
This commit is contained in:
Khushboo Vashi
2021-08-09 14:24:26 +05:30
committed by Akshay Joshi
parent 5e3aa305fd
commit 78b041465e
3 changed files with 13 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
web/pgadmin/authenticate/__init__.py
View File

@@ -53,7 +53,8 @@ def login():
session['auth_source_manager'] = None
username = form.data['email']
user = User.query.filter_by(username=username).first()
user = User.query.filter_by(username=username,
auth_source=INTERNAL).first()
if user:
if user.login_attempts >= config.MAX_LOGIN_ATTEMPTS > 0:
@@ -108,7 +109,8 @@ def login():
session['auth_source_manager'] = current_auth_obj
user.login_attempts = 0
if user:
user.login_attempts = 0
db.session.commit()
if 'auth_obj' in session: