Skip to content

Conversation

@lmamane
Copy link

@lmamane lmamane commented Jun 20, 2020

as discussed in pull request #21288

Lionel Elie Mamane added 2 commits June 20, 2020 11:48
even when token is invalid or has no password.

Returning the uid as loginname is wrong, and leads to problems when
these differ. E.g. the getapppassword API was creating app token with
the uid as loginname. In a scenario with external authentication (such
as LDAP), these tokens were then invalidated next time their underlying
password was checked, and systematically ceased to function.

Signed-off-by: Lionel Elie Mamane <[email protected]>
… to uid != loginname

Signed-off-by: Lionel Elie Mamane <[email protected]>
Copy link
Member

@MorrisJobke MorrisJobke left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code makes sense 👍

@MorrisJobke MorrisJobke requested a review from rullzer July 6, 2020 21:04
@rullzer rullzer mentioned this pull request Jul 7, 2020
1 task
@MorrisJobke MorrisJobke merged commit 1af1d31 into nextcloud:stable17 Jul 7, 2020
@welcome
Copy link

welcome bot commented Jul 7, 2020

Thanks for your first pull request and welcome to the community! Feel free to keep them coming! If you are looking for issues to tackle then have a look at this selection: https://github.com/nextcloud/server/issues?q=is%3Aopen+is%3Aissue+label%3A%22good+first+issue%22

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants