summaryrefslogtreecommitdiff
path: root/oauth/callback-native/index.php
diff options
context:
space:
mode:
Diffstat (limited to 'oauth/callback-native/index.php')
-rw-r--r--oauth/callback-native/index.php4
1 files changed, 3 insertions, 1 deletions
diff --git a/oauth/callback-native/index.php b/oauth/callback-native/index.php
index c289957..5095734 100644
--- a/oauth/callback-native/index.php
+++ b/oauth/callback-native/index.php
@@ -38,7 +38,9 @@ if (isset($result["access_token"])) {
$result = $result_orig = curl_exec($crl);
$result = json_decode($result, true);
- if (!in_array($result["id"], $app["allowed"])) {
+ $isAllowed = in_array("5fe2cdf1-cff8-470e-a54a-ad1c713b0387", array_map(function ($i) { return $i["id"]; }, $result["transitiveGroups"]));
+
+ if (!$isAllowed) {
header("HTTP/1.1 403 Forbidden");
die("Not allowed to log in to this application. This will be reported.");
}