From d0b2852de54cf2dcb6f1ac34ab17b2b3989b117e Mon Sep 17 00:00:00 2001
From: Brock H Caldwell <brock@caldwellnetworks.com>
Date: Fri, 11 Jul 2025 15:58:45 -0500
Subject: [PATCH] fix: blocks pw resets when auth method = oidc

---
 .../Framework/Controller/Web/ResetPasswordController.php | 9 +++++++++
 templates/user/reset_password/request.html.twig          | 2 +-
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/src/User/Framework/Controller/Web/ResetPasswordController.php b/src/User/Framework/Controller/Web/ResetPasswordController.php
index 160cfa5..6c643f8 100644
--- a/src/User/Framework/Controller/Web/ResetPasswordController.php
+++ b/src/User/Framework/Controller/Web/ResetPasswordController.php
@@ -2,6 +2,7 @@
 
 namespace App\User\Framework\Controller\Web;
 
+use App\Base\ConfigResolver;
 use App\User\Framework\Entity\User;
 use App\User\Framework\Form\ChangePasswordForm;
 use App\User\Framework\Form\ResetPasswordRequestForm;
@@ -29,6 +30,7 @@ class ResetPasswordController extends AbstractController
     public function __construct(
         private ResetPasswordHelperInterface $resetPasswordHelper,
         private EntityManagerInterface $entityManager,
+        private readonly ConfigResolver $configResolver,
         private readonly Security $security
     ) {
     }
@@ -45,6 +47,13 @@ class ResetPasswordController extends AbstractController
         $form = $this->createForm(ResetPasswordRequestForm::class);
         $form->handleRequest($request);
 
+        if ($this->configResolver->authIs('oidc')) {
+            $this->addFlash('reset_password_error', 'Your auth method is set to "oidc", so you will need to reset your password with your identity provider.');
+            return $this->render('user/reset_password/request.html.twig', [
+                'requestForm' => $form,
+            ])->setStatusCode(Response::HTTP_ACCEPTED);
+        }
+
         if ($form->isSubmitted() && $form->isValid()) {
             /** @var string $email */
             $email = $form->get('email')->getData();
diff --git a/templates/user/reset_password/request.html.twig b/templates/user/reset_password/request.html.twig
index cd90767..e50c622 100644
--- a/templates/user/reset_password/request.html.twig
+++ b/templates/user/reset_password/request.html.twig
@@ -12,7 +12,7 @@
 
         <form name="reset_password_request_form" method="post" class="flex flex-col gap-2">
             {% for flash_error in app.flashes('reset_password_error') %}
-                <div class="mb-3 p-2 bg-rose-500 text-black text-semibold rounded-md" role="alert">{{ flash_error }}</div>
+                <div class="mb-3 p-2 bg-rose-500 text-black font-semibold rounded-md" role="alert">{{ flash_error }}</div>
             {% endfor %}
 
             <label for="reset_password_request_form_email" class="required flex flex-col mb-2">