auth: Ensure a realm can't be created on SOCIAL_AUTH_SUBDOMAIN.

This commit is contained in:
Mateusz Mandera
2021-08-23 15:14:05 +02:00
committed by Tim Abbott
parent f5b5ca6928
commit f064e3ebac
4 changed files with 16 additions and 0 deletions

View File

@@ -4973,6 +4973,8 @@ def do_create_realm(
date_created: Optional[datetime.datetime] = None,
is_demo_organization: Optional[bool] = False,
) -> Realm:
if string_id == settings.SOCIAL_AUTH_SUBDOMAIN:
raise AssertionError("Creating a realm on SOCIAL_AUTH_SUBDOMAIN is not allowed!")
if Realm.objects.filter(string_id=string_id).exists():
raise AssertionError(f"Realm {string_id} already exists!")
if not server_initialized():