fix allowUnverifiedEmail check

getodk · May 31, 2023 · 9386a7b · 9386a7b
1 parent e9d832b
commit 9386a7b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/resources/oidc.js b/lib/resources/oidc.js
@@ -110,7 +110,7 @@ module.exports = (service, endpoint) => {
       //
       // [1]: https://developers.onelogin.com/openid-connect/guides/email-verified
       // [2]: https://learn.microsoft.com/en-us/answers/questions/812672/microsoft-openid-connect-getting-verified-email
-      if(!config.has('default.oidc.allowUnverifiedEmail') && !config.get('default.oidc.allowUnverifiedEmail') && !email_verified) {
+      if(!(config.has('default.oidc.allowUnverifiedEmail') || !config.get('default.oidc.allowUnverifiedEmail')) && !email_verified) {
         return emailNotVerified(res, userinfo);
       }