Suppress password auth in presence of OIDC

quotient-im · Jan 16, 2025 · 97a07d4 · 97a07d4
1 parent 61f5f5a
commit 97a07d4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/Quotient/connection.cpp b/Quotient/connection.cpp
@@ -970,6 +970,9 @@ std::optional<LoginFlow> Connection::getLoginFlow(const QString& flowType) const
 
 bool Connection::supportsPasswordAuth() const
 {
+    if (auto ssoFlow = getLoginFlow(LoginFlowTypes::SSO);
+        ssoFlow && ssoFlow->delegatedOidcCompatibility)
+        return false; // See MSC3824
     return d->supportsLoginFlow(LoginFlowTypes::Password);
 }