DXCDT-576: Prevent themeID from getting sent to the web app (#885)

auth0 · Nov 1, 2023 · d082118 · d082118
1 parent e5b120f
commit d082118
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/internal/cli/universal_login_customize.go b/internal/cli/universal_login_customize.go
@@ -233,6 +233,7 @@ func fetchUniversalLoginBrandingData(
 func fetchBrandingThemeOrUseDefault(ctx context.Context, api *auth0.API) *management.BrandingTheme {
 	currentTheme, err := api.BrandingTheme.Default(ctx)
 	if err == nil {
+		currentTheme.ID = nil
 		return currentTheme
 	}
 
@@ -548,10 +549,9 @@ func saveUniversalLoginBrandingData(ctx context.Context, api *auth0.API, data *u
 	})
 
 	group.Go(func() (err error) {
-		themeID := data.Theme.GetID()
-		if themeID != "" {
-			data.Theme.ID = nil
-			return api.BrandingTheme.Update(ctx, themeID, data.Theme)
+		existingTheme, err := api.BrandingTheme.Default(ctx)
+		if err == nil {
+			return api.BrandingTheme.Update(ctx, existingTheme.GetID(), data.Theme)
 		}
 
 		return api.BrandingTheme.Create(ctx, data.Theme)