portal: honor keycloak rotation completion

This commit is contained in:
Brad Stein 2026-01-23 03:35:07 -03:00
parent 1b6e58f782
commit 27ece883cd

View File

@ -1056,10 +1056,15 @@ def register(app) -> None:
actions_list: list[str] = [] actions_list: list[str] = []
if isinstance(actions, list): if isinstance(actions, list):
actions_list = [a for a in actions if isinstance(a, str)] actions_list = [a for a in actions if isinstance(a, str)]
rotation_requested = _password_rotation_requested(conn, code)
already_rotated = rotation_requested and "UPDATE_PASSWORD" not in actions_list
if not already_rotated:
if "UPDATE_PASSWORD" not in actions_list: if "UPDATE_PASSWORD" not in actions_list:
actions_list.append("UPDATE_PASSWORD") actions_list.append("UPDATE_PASSWORD")
admin_client().update_user_safe(user_id, {"requiredActions": actions_list}) admin_client().update_user_safe(user_id, {"requiredActions": actions_list})
if not rotation_requested:
conn.execute( conn.execute(
""" """
INSERT INTO access_request_onboarding_artifacts (request_code, artifact, value_hash) INSERT INTO access_request_onboarding_artifacts (request_code, artifact, value_hash)