Skip to content

Conversation

@backportbot-nextcloud
Copy link

backport of #18135

Otherwise we keep on using it with leading or trailing whitespaces for
app tokens and other logic. The reason this doesn't throw an error
immediately with local users is that (My)SQL compares strings regardless
of their padding by default. So we look up 'uid ' and get the row for
the user 'uid'.
Other back-ends will lead to a hard error, though, and the user is
unable to log out as all request fail.

Ref https://stackoverflow.com/a/10495807/2239067

Signed-off-by: Christoph Wurst <[email protected]>
@gary-kim gary-kim added 4. to release Ready to be released and/or waiting for tests to finish bug and removed bug labels Nov 29, 2019
@rullzer rullzer merged commit ebcb7b7 into stable17 Dec 2, 2019
@rullzer rullzer deleted the backport/18135/stable17 branch December 2, 2019 07:53
@rullzer rullzer mentioned this pull request Dec 11, 2019
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

4. to release Ready to be released and/or waiting for tests to finish bug feature: authentication feature: users and groups

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants