bcgov / bcgov/entity

Inactive user record is not considered while getting current user record from token

Open
#33,389 0 comments 0 reactions 0 assignees View on GitHub
bug Pay
Dominant language
JavaScript
Stars
23
Forks
62
Avg merge
24m
Merged PRs (30d)
1

Description

**Describe the bug in current situation**
When the user logs in auth-api finds the user using the keycloak_guid (sub) or using idp_userid.
When there are multiple user profiles with same idp_userid (cases when old account is not active), this call would fail as the code is not validating against inactive users.

**Link bug to the User Story**

**Impact of this bug**
One user is facing this issue and support ticket can be found [here](https://sbc-registries.atlassian.net/browse/ITOPS-276979)

**Chance of Occurring (high/medium/low/very low)**
low

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.