OpenConceptLab/ocl_online#339 | Sign-in: don't map a Keycloak identity onto a deactivated account unless the verified email matches - #921

Merged

paynejd merged 2 commits into

ocl_online-339-oidc-deactivated

Sep 30, 2026

Commits on Sep 30, 2026

OpenConceptLab/ocl_online#339 | Sign-in doesn't map a Keycloak identity onto a deactivated account unless its verified email matches

paynejd
and
claude
committed
d878f26
OpenConceptLab/ocl_online#339 | Sign-in looks the account up once, refuses a non-string email, and drops a refused identity's session tokens

paynejd
and
claude
committed
e5a6279