tyler.durden
/
icingaweb2
mirror of https://github.com/Icinga/icingaweb2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Autologin: Test logged session against remote user 

fixes #6462
This commit is contained in:
Marius Hein 2014-07-29 12:06:43 +02:00
parent 8f85a66e13
commit 64954e9924
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
library/Icinga/Authentication/Manager.php
View File

@ -117,6 +117,13 @@ class Manager
public function authenticateFromSession() public function authenticateFromSession()
{ {
$this->user = Session::getSession()->get('user'); $this->user = Session::getSession()->get('user');
if ($this->user
&& array_key_exists('REMOTE_USER', $_SERVER)
&& $this->user->getUsername() !== $_SERVER['REMOTE_USER']
) {
$this->removeAuthorization();
}
} }
/** /**