1
0
mirror of https://github.com/OpenNebula/one.git synced 2025-03-27 10:50:10 +03:00

Security bug in simple authorization

This commit is contained in:
Javi Fontan 2010-07-23 17:41:32 +02:00
parent 41aabcd3cb
commit fc2d14a058

View File

@ -28,7 +28,7 @@ class SimpleAuth
def auth(user_id, user, password, token)
t_user, t_password=token.split(':')
auth=(password==token)
auth="Invalid credentials" if auth!=true
auth="Invalid credentials" if auth!=true or token=='-'
auth
end
end