colymba/silverstripe-restfulapi

TokenAuthenticator should check `canLogIn` before actually logging in a user

Opened this issue · 3 comments

Member::canLogIn should be checked before logging in a user.

This will prevent that locked out users can login in any form.

Should I create a PR for this?

Yes please :) seems straightforward enough?

PR is up #53