tyler.durden
/
icingaweb2
mirror of https://github.com/Icinga/icingaweb2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Autologin: Do not require a bogus password in the source code

This commit is contained in:
Eric Lippmann 2014-06-11 15:04:15 +02:00
parent 63fc8eb27e
commit 7215ba4f59
2 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
application/controllers/AuthenticationController.php
View File

@ -63,8 +63,6 @@ class AuthenticationController extends ActionController
$this->view->form = new LoginForm();
$this->view->form->setRequest($this->_request);
$this->view->title = $this->translate('Icingaweb Login');
$user = new User('');
$password = '';
try {
$redirectUrl = Url::fromPath($this->_request->getParam('redirect', 'dashboard'));
@ -95,9 +93,10 @@ class AuthenticationController extends ActionController
if ($this->getRequest()->isGet()) {
$user = new User('');
foreach ($chain as $backend) {
if ($backend instanceof AutoLoginBackend) {
$authenticated = $backend->authenticate($user, $password);
$authenticated = $backend->authenticate($user);
if ($authenticated === true) {
$auth->setAuthenticated($user);
$this->redirectNow($redirectUrl);

2
library/Icinga/Authentication/Backend/AutoLoginBackend.php
View File

@ -75,7 +75,7 @@ class AutoLoginBackend extends UserBackend
*
* @return bool
*/
public function authenticate(User $user, $password)
public function authenticate(User $user, $password = null)
{
return $this->hasUser($user);
}