Deny Users invite themselves to their own federated connection

cs3org · Feb 14, 2025 · 5a747f9 · 5a747f9
1 parent 2a7145a
commit 5a747f9
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/changelog/unreleased/fix-ocm-invite.md b/changelog/unreleased/fix-ocm-invite.md
@@ -0,0 +1,5 @@
+Bugfix: Deny Users invite themselves to their own federated connection
+
+Deny Users invite themselves to their own federated connection
+
+https://github.com/cs3org/reva/pull/5077
diff --git a/internal/grpc/services/ocminvitemanager/ocminvitemanager.go b/internal/grpc/services/ocminvitemanager/ocminvitemanager.go
@@ -20,6 +20,7 @@ package ocminvitemanager
 
 import (
 	"context"
+	"fmt"
 	"time"
 
 	gateway "github.com/cs3org/go-cs3apis/cs3/gateway/v1beta1"
@@ -170,6 +171,12 @@ func (s *service) ForwardInvite(ctx context.Context, req *invitepb.ForwardInvite
 		return nil, err
 	}
 
+	if req.GetOriginSystemProvider().Domain == s.conf.ProviderDomain {
+		return &invitepb.ForwardInviteResponse{
+			Status: status.NewInvalid(ctx, "can not accept an invite from the same instance"),
+		}, nil
+	}
+
 	// Accept the invitation on the remote OCM provider
 	remoteUser, err := s.ocmClient.InviteAccepted(ctx, ocmEndpoint, &client.InviteAcceptedRequest{
 		Token:             req.InviteToken.GetToken(),