From 7665b38b799c0563e86992750ec183b9d69c4f0f Mon Sep 17 00:00:00 2001 From: Mauricio Siu Date: Sat, 31 Jan 2026 04:46:57 -0600 Subject: [PATCH] feat(sso): refine provider query to include user ID for enhanced security - Updated the `listProviders` query to filter SSO providers by both organization ID and user ID. - Modified the provider validation logic to ensure that only relevant providers are returned for the authenticated user. --- apps/dokploy/server/api/routers/proprietary/sso.ts | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/apps/dokploy/server/api/routers/proprietary/sso.ts b/apps/dokploy/server/api/routers/proprietary/sso.ts index 90a2916dd..064e41286 100644 --- a/apps/dokploy/server/api/routers/proprietary/sso.ts +++ b/apps/dokploy/server/api/routers/proprietary/sso.ts @@ -54,7 +54,10 @@ export const ssoRouter = createTRPCRouter({ }), listProviders: enterpriseProcedure.query(async ({ ctx }) => { const providers = await db.query.ssoProvider.findMany({ - where: eq(ssoProvider.organizationId, ctx.session.activeOrganizationId), + where: and( + eq(ssoProvider.organizationId, ctx.session.activeOrganizationId), + eq(ssoProvider.userId, ctx.session.userId), + ), columns: { id: true, providerId: true, @@ -76,6 +79,7 @@ export const ssoRouter = createTRPCRouter({ and( eq(ssoProvider.providerId, input.providerId), eq(ssoProvider.organizationId, ctx.session.activeOrganizationId), + eq(ssoProvider.userId, ctx.session.userId), ), ) .returning({ id: ssoProvider.id });