mirror of
https://github.com/OpenNebula/one.git
synced 2025-03-27 10:50:10 +03:00
Security bug in simple authorization
This commit is contained in:
parent
41aabcd3cb
commit
fc2d14a058
@ -28,7 +28,7 @@ class SimpleAuth
|
||||
def auth(user_id, user, password, token)
|
||||
t_user, t_password=token.split(':')
|
||||
auth=(password==token)
|
||||
auth="Invalid credentials" if auth!=true
|
||||
auth="Invalid credentials" if auth!=true or token=='-'
|
||||
auth
|
||||
end
|
||||
end
|
||||
|
Loading…
x
Reference in New Issue
Block a user