From da7d8c9821fb37504e6b8728b35285d4bb112597 Mon Sep 17 00:00:00 2001 From: Ginger Date: Thu, 2 Jul 2026 16:16:14 -0400 Subject: [PATCH] fix: Prevent register page from being accessible when OIDC is enabled --- src/web/pages/account/register.rs | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/src/web/pages/account/register.rs b/src/web/pages/account/register.rs index 0e23d3359..e47a84b3d 100644 --- a/src/web/pages/account/register.rs +++ b/src/web/pages/account/register.rs @@ -134,13 +134,15 @@ async fn route_register( ) -> Result { let is_first_run = services.firstrun.is_first_run(); - if session_store - .get::(User::KEY) - .await - .unwrap() - .is_some() + if services.oidc.enabled() + || session_store + .get::(User::KEY) + .await + .unwrap() + .is_some() { - // Redirect already logged-in users to the account panel + // Redirect to the account panel if the user is already logged in + // or OIDC is enabled return response!(Redirect::to(&LoginTarget::Account.target_path())); }