From c779f9383e2f0886ad9deafe4365b2007189ff5b Mon Sep 17 00:00:00 2001
From: Lixian Zhou <charlie32690@gmail.com>
Date: Tue, 17 Mar 2026 10:32:20 -0400
Subject: [PATCH] fix

---
 app/controllers/auth.controller.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/controllers/auth.controller.js b/app/controllers/auth.controller.js
index f049de2..bbf8f67 100644
--- a/app/controllers/auth.controller.js
+++ b/app/controllers/auth.controller.js
@@ -192,7 +192,7 @@ exports.login = async (req, res) => {
           title: localEmployee.title || ""
         });
       }
-      if (!activeEmployee) {
+      if (!activeEmployee && isPasswordCorrect) {
         throw Error("User is not activated");
       }
       // Local account exists but credential doesn't match. Continue to external auth fallback.