hazza/DSpace
1
0
Fork 0
mirror of https://github.com/DSpace/DSpace.git synced 2025-10-10 19:43:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Check session salt in shib auth

Browse Source
This commit is contained in:
Giuseppe Digilio
2020-01-10 10:25:58 +01:00
parent a32d11eb85
commit 462f20a338
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
dspace-api/src/main/java/org/dspace/authenticate/ShibAuthentication.java
View File

@@ -227,6 +227,10 @@ public class ShibAuthentication implements AuthenticationMethod {
return AuthenticationMethod.NO_SUCH_USER; return AuthenticationMethod.NO_SUCH_USER;
} }
if (eperson != null && StringUtils.isNotBlank(eperson.getSessionSalt())) {
return AuthenticationMethod.NO_SUCH_USER;
}
// Step 3: Update User's Metadata // Step 3: Update User's Metadata
updateEPerson(context, request, eperson); updateEPerson(context, request, eperson);

1
dspace-server-webapp/src/main/java/org/dspace/app/rest/security/StatelessLoginFilter.java
View File

@@ -15,7 +15,6 @@ import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpServletResponse;
import org.springframework.security.authentication.AuthenticationManager; import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.authentication.BadCredentialsException;
import org.springframework.security.core.Authentication; import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException; import org.springframework.security.core.AuthenticationException;
import org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter; import org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter;