Added a redirect check so redirect to /not-allowed sends the user bac…

…k to /
joindin · Oct 6, 2023 · 72dc1fe · 72dc1fe
1 parent d2f8cd5
commit 72dc1fe
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/app/src/User/UserController.php b/app/src/User/UserController.php
@@ -896,7 +896,12 @@ protected function handleLogin($result, $redirect = '')
         $user = $userApi->getUser($result->user_uri);
         if ($user) {
             $_SESSION['user'] = $user;
-            if (empty($redirect) || strpos($redirect, '/user/login') === 0) {
+
+            if (
+                empty($redirect)
+                || strpos($redirect, '/user/login') === 0
+                || strpos($redirect, '/not-allowed') === 0
+            ) {
                 $this->application->redirect('/');
             }
             $this->application->redirect($redirect);