CAL-1053: Invalidate password to avoid once Google auth is used to merge accounts (#7152)

* CAL-1053: Invalidate password to avoid once Google auth is used to merge accounts * remove log
2023-02-17 18:59:34 +00:00
parent 2698cde311
commit 2c54ea90f9
1 changed files with 4 additions and 0 deletions
@@ -507,6 +507,10 @@ export default NextAuth({
            existingUserWithEmail.identityProvider === IdentityProvider.CAL &&
            (idP === IdentityProvider.GOOGLE || idP === IdentityProvider.SAML)
          ) {
+            await prisma.user.update({
+              where: { email: existingUserWithEmail.email },
+              data: { password: null },
+            });
            return true;
          } else if (existingUserWithEmail.identityProvider === IdentityProvider.CAL) {
            return "/auth/error?error=use-password-login";