Files
cal.diy/apps/web/public
Pedro Castro 51639e38d7 fix(auth): block OAuth linking for unverified accounts (#26598)
* fix(auth): sanitize unverified accounts during OAuth linking

- Add AccountSanitizationService for secure account cleanup
- Clear webhooks, API keys, credentials, and sessions for unverified accounts
- Reset password and 2FA settings during OAuth conversion
- Nullify redirect URLs on event types

Only affects accounts that never completed email verification

* fix(auth): block OAuth linking for unverified accounts

  Replace sanitization with simpler blocking approach:
  - Unverified CAL accounts cannot link to OAuth (Google/SAML)
  - Add user-friendly error message with recovery path
  - Remove AccountSanitizationService (no data loss risk)
2026-01-09 11:04:39 +00:00
..
2022-04-15 08:54:09 +00:00
2022-07-28 13:58:26 -06:00
2023-05-22 21:53:37 +00:00
2022-09-06 16:58:16 -06:00
2023-09-05 19:56:02 +02:00
…
2022-02-18 10:33:18 -07:00
2023-11-28 14:52:53 +00:00
2024-04-17 11:09:11 -04:00
2023-04-12 23:10:23 -03:00