Skip to content

Conversation

@lmamane
Copy link

@lmamane lmamane commented Jun 20, 2020

as discussed in pull request #21288

Lionel Elie Mamane added 2 commits June 20, 2020 11:52
even when token is invalid or has no password.

Returning the uid as loginname is wrong, and leads to problems when
these differ. E.g. the getapppassword API was creating app token with
the uid as loginname. In a scenario with external authentication (such
as LDAP), these tokens were then invalidated next time their underlying
password was checked, and systematically ceased to function.

Signed-off-by: Lionel Elie Mamane <[email protected]>
… to uid != loginname

Signed-off-by: Lionel Elie Mamane <[email protected]>
@rullzer rullzer added the 3. to review Waiting for reviews label Jun 24, 2020
@MorrisJobke MorrisJobke added this to the Nextcloud 18.0.7 milestone Jul 6, 2020
@rullzer rullzer mentioned this pull request Jul 7, 2020
5 tasks
@ChristophWurst ChristophWurst added 4. to release Ready to be released and/or waiting for tests to finish and removed 3. to review Waiting for reviews labels Jul 8, 2020
@MorrisJobke MorrisJobke merged commit 778cb33 into nextcloud:stable18 Jul 8, 2020
@MorrisJobke
Copy link
Member

/backport to stable19

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

4. to release Ready to be released and/or waiting for tests to finish

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants