Skip to content

Conversation

@backportbot-nextcloud
Copy link

backport of #21499

Lionel Elie Mamane added 2 commits July 9, 2020 14:37
even when token is invalid or has no password.

Returning the uid as loginname is wrong, and leads to problems when
these differ. E.g. the getapppassword API was creating app token with
the uid as loginname. In a scenario with external authentication (such
as LDAP), these tokens were then invalidated next time their underlying
password was checked, and systematically ceased to function.

Signed-off-by: Lionel Elie Mamane <[email protected]>
… to uid != loginname

Signed-off-by: Lionel Elie Mamane <[email protected]>
Copy link
Member

@MorrisJobke MorrisJobke left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code makes sense 👍

@MorrisJobke MorrisJobke added the 3. to review Waiting for reviews label Jul 9, 2020
@rullzer rullzer mentioned this pull request Jul 9, 2020
3 tasks
Copy link
Member

@rullzer rullzer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

sure

@rullzer rullzer merged commit b3c9b16 into stable19 Jul 9, 2020
@rullzer rullzer deleted the backport/21499/stable19 branch July 9, 2020 17:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants