diff --git a/app/controllers/api/account.php b/app/controllers/api/account.php index 40e8c11f6..a80050bbf 100644 --- a/app/controllers/api/account.php +++ b/app/controllers/api/account.php @@ -400,6 +400,11 @@ App::get('/v1/account/sessions/oauth2/:provider/redirect') $validateURL = new URL(); $appId = $project->getAttribute('authProviders', [])[$provider . 'Appid'] ?? ''; $appSecret = $project->getAttribute('authProviders', [])[$provider . 'Secret'] ?? '{}'; + $providerEnabled = $project->getAttribute('authProviders', [])[$provider . 'Enabled'] ?? false; + + if (!$providerEnabled) { + throw new Exception(Exception::PROJECT_PROVIDER_DISABLED, 'This provider is disabled. Please enable the provider from your ' . APP_NAME . ' console to continue.'); + } if (!empty($appSecret) && isset($appSecret['version'])) { $key = App::getEnv('_APP_OPENSSL_KEY_V' . $appSecret['version']);