summaryrefslogtreecommitdiff
path: root/oauth/callback
diff options
context:
space:
mode:
authorRaindropsSys <raindrops@equestria.dev>2023-11-12 22:15:51 +0100
committerRaindropsSys <raindrops@equestria.dev>2023-11-12 22:15:51 +0100
commitca4588f1b8200ef93e1614f2274a960bbb9fd53e (patch)
tree9a363db45504157f0e5a54fe5b894cd2781f5d62 /oauth/callback
parente3aa7eafa663ab94c77695c3e0f2fe88874480ad (diff)
downloadmist-ca4588f1b8200ef93e1614f2274a960bbb9fd53e.tar.gz
mist-ca4588f1b8200ef93e1614f2274a960bbb9fd53e.tar.bz2
mist-ca4588f1b8200ef93e1614f2274a960bbb9fd53e.zip
Updated 7 files (automated)
Diffstat (limited to 'oauth/callback')
-rw-r--r--oauth/callback/index.php4
1 files changed, 1 insertions, 3 deletions
diff --git a/oauth/callback/index.php b/oauth/callback/index.php
index f57e124..bbb3322 100644
--- a/oauth/callback/index.php
+++ b/oauth/callback/index.php
@@ -38,9 +38,7 @@ if (isset($result["access_token"])) {
$result = $result_orig = curl_exec($crl);
$result = json_decode($result, true);
- $isAllowed = in_array("5fe2cdf1-cff8-470e-a54a-ad1c713b0387", array_map(function ($i) { return $i["id"]; }, $result["transitiveGroups"]));
-
- if (!$isAllowed) {
+ if (!in_array($result["id"], $app["allowed"])) {
header("HTTP/1.1 403 Forbidden");
die("Not allowed to log in to this application. This will be reported.");
}