Revert c5b51bb

medusa-project · Mar 5, 2024 · 8f6fcc1 · 8f6fcc1
1 parent 2ff8c3b
commit 8f6fcc1
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/app/controllers/sessions_controller.rb b/app/controllers/sessions_controller.rb
@@ -44,8 +44,11 @@ def create
     user = User.from_omniauth(auth, institution: current_institution)
     if !user&.enabled
       unauthorized(message: "This user account is disabled.") and return
-    elsif params[:provider] == "saml" && user.institution != current_institution
-      unauthorized(message: "You must log in via your home institution's domain.") and return
+    elsif user.institution != current_institution
+      unless user.sysadmin?(client_ip:       request_context.client_ip,
+                            client_hostname: request_context.client_hostname)
+        unauthorized(message: "You must log in via your home institution's domain.") and return
+      end
     end
 
     begin