@@ -249,7 +249,7 @@ func signInOpenIDVerify(ctx *context.Context) {
249
249
log .Error ("signInOpenIDVerify: Unable to save changes to the session: %v" , err )
250
250
}
251
251
252
- if u != nil || ! setting .Service .EnableOpenIDSignUp {
252
+ if u != nil || ! setting .Service .EnableOpenIDSignUp || setting . Service . AllowOnlyInternalRegistration {
253
253
ctx .Redirect (setting .AppSubURL + "/user/openid/connect" )
254
254
} else {
255
255
ctx .Redirect (setting .AppSubURL + "/user/openid/register" )
@@ -267,6 +267,7 @@ func ConnectOpenID(ctx *context.Context) {
267
267
ctx .Data ["PageIsSignIn" ] = true
268
268
ctx .Data ["PageIsOpenIDConnect" ] = true
269
269
ctx .Data ["EnableOpenIDSignUp" ] = setting .Service .EnableOpenIDSignUp
270
+ ctx .Data ["AllowOnlyInternalRegistration" ] = setting .Service .AllowOnlyInternalRegistration
270
271
ctx .Data ["OpenID" ] = oid
271
272
userName , _ := ctx .Session .Get ("openid_determined_username" ).(string )
272
273
if userName != "" {
@@ -328,6 +329,7 @@ func RegisterOpenID(ctx *context.Context) {
328
329
ctx .Data ["PageIsSignIn" ] = true
329
330
ctx .Data ["PageIsOpenIDRegister" ] = true
330
331
ctx .Data ["EnableOpenIDSignUp" ] = setting .Service .EnableOpenIDSignUp
332
+ ctx .Data ["AllowOnlyInternalRegistration" ] = setting .Service .AllowOnlyInternalRegistration
331
333
ctx .Data ["EnableCaptcha" ] = setting .Service .EnableCaptcha
332
334
ctx .Data ["Captcha" ] = context .GetImageCaptcha ()
333
335
ctx .Data ["CaptchaType" ] = setting .Service .CaptchaType
@@ -367,6 +369,11 @@ func RegisterOpenIDPost(ctx *context.Context) {
367
369
ctx .Data ["HcaptchaSitekey" ] = setting .Service .HcaptchaSitekey
368
370
ctx .Data ["OpenID" ] = oid
369
371
372
+ if setting .Service .AllowOnlyInternalRegistration {
373
+ ctx .Error (http .StatusForbidden )
374
+ return
375
+ }
376
+
370
377
if setting .Service .EnableCaptcha {
371
378
var valid bool
372
379
var err error
0 commit comments