Files
gitlabhq/app/controllers/profiles/accounts_controller.rb
T
Robert SpeicherandRobert Speicher 4a7ba5114d Merge branch 'disable-saml-account-unlink' into 'master'
Disable the unlink feature for SAML connected accounts (social login).

This disables the ability to manually unlink your SAML account, if you have one connected. In certain scenarios, the only allowed login mechanism can be SAML, and if you unlink your account you will be locked out of the system (configuration dependent).

Fixes #18613

See merge request !4662
2016-06-17 16:03:05 -04:00

12 lines
300 B
Ruby

class Profiles::AccountsController < Profiles::ApplicationController
def show
@user = current_user
end
def unlink
provider = params[:provider]
current_user.identities.find_by(provider: provider).destroy unless provider.to_s == 'saml'
redirect_to profile_account_path
end
end