Skip to content

fix: Do not build encrypted password if there is none - #51130

Merged
juliusknorr merged 1 commit into
masterfrom
fix/credential-passwordless-auth
Mar 7, 2025
Merged

fix: Do not build encrypted password if there is none#51130
juliusknorr merged 1 commit into
masterfrom
fix/credential-passwordless-auth

Conversation

@juliusknorr

@juliusknorrjuliusknorr commented Feb 28, 2025

Copy link
Copy Markdown
Member

This fixes a regression from #48915 where user backends without passwords would store an encrypted empty password for new app passwords.

While they first work, after 5 minutes the password is checked and cannot be validated as there is none so the token expired.

Checklist

@juliusknorr

Copy link
Copy Markdown
MemberAuthor

/backport to stable31

@juliusknorr

Copy link
Copy Markdown
MemberAuthor

/backport to stable28

@juliusknorr

Copy link
Copy Markdown
MemberAuthor

/backport to stable29

@juliusknorr

Copy link
Copy Markdown
MemberAuthor

/backport to stable30

@provokateurinprovokateurin left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sounds like something that requires a test to avoid regressions.

@pabzmpabzm left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Apart from the minor style suggestion it looks good to me! 👍

Comment threadlib/private/Authentication/LoginCredentials/Store.php Outdated
@susnuxsusnux added this to the Nextcloud 32 milestone Mar 2, 2025
Signed-off-by: Julius Knorr <jus@bitgrid.net>
@juliusknorr
juliusknorrforce-pushed the fix/credential-passwordless-auth branch from 666a017 to 777cd94CompareMarch 6, 2025 08:31
@juliusknorr
juliusknorr requested a review from a team as a code ownerMarch 6, 2025 08:31
@juliusknorr
juliusknorr requested review from icewind1991 and removed request for a teamMarch 6, 2025 08:31
@juliusknorr

Copy link
Copy Markdown
MemberAuthor

Pushed a unit test

@juliusknorr
juliusknorr disabled auto-merge March 7, 2025 15:49
@juliusknorr
juliusknorr merged commit bb6b462 into masterMar 7, 2025
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants

@juliusknorr@provokateurin@pabzm@susnux@skjnldsv