mirror of
https://github.com/owncloud/ocis.git
synced 2026-10-23 23:29:02 +03:00
dc6dda44e2
* fix: [OCISDEV-128] recover login page after the current user was deleted When a user account was deleted while its session was still stored in the browser, opening the web interface redirected to an authentication error page and looped there. lico kept accepting the stale logon session but could no longer resolve the deleted user, so the sign-in flow re-issued the authorization request without its parameters and lico answered with a self-referential error redirect that the browser followed forever. Add an idp middleware that detects this stuck authorization loop (an OAuth2 error parameter on the authorize endpoint, which never occurs in a healthy inbound request), expires the stale logon cookie server-side and restarts a clean login so a different user can sign in. * chore: reference PR number in changelog