self-hosted/Mailu
1
0
Fork 0
mirror of https://github.com/Mailu/Mailu.git synced 2025-01-18 03:21:36 +02:00
Code Issues Releases Activity

Do not block webmail when we have a valid SSO sess

Browse Source
This commit is contained in:
Florent Daigniere 2023-12-21 12:37:08 +01:00
parent 774dfa4da8
commit 325aa5452b
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
core/admin/mailu/internal/views/auth.py
View File

@ -37,7 +37,7 @@ def nginx_authentication():
is_valid_user = False
username = response.headers.get('Auth-User', None)
if response.headers.get("Auth-User-Exists") == "True":
if not is_app_token and utils.limiter.should_rate_limit_user(username, client_ip):
if not is_from_webmail and not is_app_token and utils.limiter.should_rate_limit_user(username, client_ip):
# FIXME could be done before handle_authentication()
status, code = nginx.get_status(flask.request.headers['Auth-Protocol'], 'ratelimit')
response = flask.Response()

1
towncrier/newsfragments/3094.bugfix Normal file
View File

@ -0,0 +1 @@
Ensure we do not block logins from webmails when there is a valid SSO session