From df2348a74a0859c4074c639c893a0a2fa4e96752 Mon Sep 17 00:00:00 2001 From: Richard Schreiber Date: Tue, 23 Jun 2026 15:02:02 +0200 Subject: [PATCH] set password unusable --- src/pretix/presale/views/customer.py | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) diff --git a/src/pretix/presale/views/customer.py b/src/pretix/presale/views/customer.py index b002711a6f..e25dc34d63 100644 --- a/src/pretix/presale/views/customer.py +++ b/src/pretix/presale/views/customer.py @@ -870,18 +870,17 @@ class SSOLoginReturnView(RedirectBackMixin, View): customer = self.request.organizer.customers.get( email=profile['email'], ) - update_fields = { - 'provider': self.provider.pk, - 'external_identifier': str(profile['uid']), - 'identifier': identifier, - 'is_active': True, - 'is_verified': True, - } + customer.set_unusable_password() + customer.provider = self.provider + customer.external_identifier = str(profile['uid']) + customer.identifier = identifier + customer.is_active = True + customer.is_verified = True if name_parts: - update_fields['name_parts'] = name_parts + customer.name_parts = name_parts if profile.get('phone'): - update_fields['phone'] = profile.get('phone') - customer.update(**update_fields) + customer.phone = profile.get('phone') + customer.save() except Customer.DoesNotExist: # should actually never happen return self._fail(