Check session salt in shib auth

This commit is contained in:
Giuseppe Digilio
2020-01-10 10:25:58 +01:00
parent a32d11eb85
commit 462f20a338
2 changed files with 4 additions and 1 deletions

View File

@@ -227,6 +227,10 @@ public class ShibAuthentication implements AuthenticationMethod {
return AuthenticationMethod.NO_SUCH_USER;
}
if (eperson != null && StringUtils.isNotBlank(eperson.getSessionSalt())) {
return AuthenticationMethod.NO_SUCH_USER;
}
// Step 3: Update User's Metadata
updateEPerson(context, request, eperson);