Require AS users to be registered before use

2026-04-28 06:16:17 +00:00 · 2016-01-13 13:19:47 +00:00
parent 37716d55ed
commit 7d09ab8915
1 changed files with 5 additions and 0 deletions
@@ -528,6 +528,11 @@ class Auth(object):
                            403,
                            "Application service cannot masquerade as this user."
                        )
+                    if not (yield self.store.get_user_by_id(user_id)):
+                        raise AuthError(
+                            403,
+                            "Application service has not registered this user"
+                        )

                if not user_id:
                    raise KeyError