From f58b9fcab409ee34554eba2c77ff187c1845e593 Mon Sep 17 00:00:00 2001
From: Kyle Spearrin <kspearrin@users.noreply.github.com>
Date: Thu, 30 Sep 2021 11:24:29 -0400
Subject: [PATCH] uncomment to require auth-email header (#1604)

---
 .../ResourceOwnerPasswordValidator.cs               | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs b/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs
index 777f2e259b..518f0848f4 100644
--- a/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs
+++ b/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs
@@ -50,13 +50,12 @@ namespace Bit.Core.IdentityServer
 
         public async Task ValidateAsync(ResourceOwnerPasswordValidationContext context)
         {
-            // Uncomment whenever we want to require the `auth-email` header
-            //if (!AuthEmailHeaderIsValid(context))
-            //{
-            //    context.Result = new GrantValidationResult(TokenRequestErrors.InvalidGrant,
-            //        "Auth-Email header invalid.");
-            //    return;
-            //}
+            if (!AuthEmailHeaderIsValid(context))
+            {
+                context.Result = new GrantValidationResult(TokenRequestErrors.InvalidGrant,
+                    "Auth-Email header invalid.");
+                return;
+            }
 
             string bypassToken = null;
             if (_captchaValidationService.RequireCaptchaValidation(_currentContext))