From 9b3e333134a84299b83779f6f93451eae087858c Mon Sep 17 00:00:00 2001
From: Bradley Schofield <bradley@appwrite.io>
Date: Tue, 30 Aug 2022 16:53:57 +0100
Subject: [PATCH] Fix unaccepted invitations giving access to projects

---
 src/Appwrite/Auth/Auth.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/Appwrite/Auth/Auth.php b/src/Appwrite/Auth/Auth.php
index a8005be704..9f975cf576 100644
--- a/src/Appwrite/Auth/Auth.php
+++ b/src/Appwrite/Auth/Auth.php
@@ -316,6 +316,10 @@ class Auth
         }
 
         foreach ($user->getAttribute('memberships', []) as $node) {
+            if (!isset($node['confirm']) || !$node['confirm']) {
+                continue;
+            }
+
             if (isset($node['teamId']) && isset($node['roles'])) {
                 $roles[] = 'team:' . $node['teamId'];