OAuth: deny login for disabled users (#17957)

pkg/api/login_oauth.go

@@ -191,6 +191,11 @@ func (hs *HTTPServer) OAuthLogin(ctx *m.ReqContext) {
 		return
 	}
 
+	if cmd.Result.IsDisabled {
+		hs.redirectWithError(ctx, login.ErrUserDisabled)
+		return
+	}
+
 	// login
 	hs.loginUserWithUser(cmd.Result, ctx)