From 90be13e7ee7e7abb5a4772b4dfdd3b35fbfc939a Mon Sep 17 00:00:00 2001 From: Ankush Menat Date: Mon, 13 Mar 2023 11:06:15 +0530 Subject: [PATCH] fix: dont respond to login api call if email login is disabled (#20311) --- frappe/www/login.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/frappe/www/login.py b/frappe/www/login.py index 8529b03bf6..3cd9edf7ce 100644 --- a/frappe/www/login.py +++ b/frappe/www/login.py @@ -121,6 +121,9 @@ def login_via_token(login_token: str): @rate_limit(limit=5, seconds=60 * 60) def send_login_link(email: str): + if not frappe.get_system_settings("login_with_email_link"): + return + expiry = frappe.get_system_settings("login_with_email_link_expiry") or 10 link = _generate_temporary_login_link(email, expiry)