mirror of
https://github.com/DSpace/DSpace.git
synced 2025-10-10 11:33:11 +00:00
Check session salt in shib auth
This commit is contained in:
@@ -227,6 +227,10 @@ public class ShibAuthentication implements AuthenticationMethod {
|
||||
return AuthenticationMethod.NO_SUCH_USER;
|
||||
}
|
||||
|
||||
if (eperson != null && StringUtils.isNotBlank(eperson.getSessionSalt())) {
|
||||
return AuthenticationMethod.NO_SUCH_USER;
|
||||
}
|
||||
|
||||
// Step 3: Update User's Metadata
|
||||
updateEPerson(context, request, eperson);
|
||||
|
||||
|
Reference in New Issue
Block a user