portal: honor keycloak rotation completion
This commit is contained in:
parent
1b6e58f782
commit
27ece883cd
@ -1056,10 +1056,15 @@ def register(app) -> None:
|
|||||||
actions_list: list[str] = []
|
actions_list: list[str] = []
|
||||||
if isinstance(actions, list):
|
if isinstance(actions, list):
|
||||||
actions_list = [a for a in actions if isinstance(a, str)]
|
actions_list = [a for a in actions if isinstance(a, str)]
|
||||||
|
|
||||||
|
rotation_requested = _password_rotation_requested(conn, code)
|
||||||
|
already_rotated = rotation_requested and "UPDATE_PASSWORD" not in actions_list
|
||||||
|
|
||||||
|
if not already_rotated:
|
||||||
if "UPDATE_PASSWORD" not in actions_list:
|
if "UPDATE_PASSWORD" not in actions_list:
|
||||||
actions_list.append("UPDATE_PASSWORD")
|
actions_list.append("UPDATE_PASSWORD")
|
||||||
admin_client().update_user_safe(user_id, {"requiredActions": actions_list})
|
admin_client().update_user_safe(user_id, {"requiredActions": actions_list})
|
||||||
|
if not rotation_requested:
|
||||||
conn.execute(
|
conn.execute(
|
||||||
"""
|
"""
|
||||||
INSERT INTO access_request_onboarding_artifacts (request_code, artifact, value_hash)
|
INSERT INTO access_request_onboarding_artifacts (request_code, artifact, value_hash)
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user