admin/Facilitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FCLT#57639 'Inloggen via e-mail' moet wel uniciteit gaan controleren

Browse Source 
svn path=/Website/branches/v2019.1/; revision=42375
This commit is contained in:
Jos Groot Lipman
2019-05-02 15:04:43 +00:00
parent 7190914f38
commit 9d77298718
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
APPL/AUT/Login.inc
View File

@@ -728,6 +728,17 @@ function getIdentity(username, wachtwoord, params)
else // Wordt opgepikt door login_save.asp
result = { success: true, otp_user_key: oRs("prs_perslid_key").Value };
var prev_key = oRs("prs_perslid_key").Value;
oRs.MoveNext();
if (!oRs.EOF)
{ // Het is in theorie denkbaar dat je via SAML of JWT binnenkomt en authenticatie
// doet op een veld (zoals email) waar uniciteit niet is gegarandeerd
__DoLog("Login failed: User {0} is not unique (prs_perslid_key {1} and {2} both match)".format(username, prev_key, oRs("prs_perslid_key").Value), "#ff0000");
// deze foutmelding geeft geen terugkoppeling
// var result = { success: false, fail_reason: "User {0} is not unique".format(username) };
// daarom vooralsnog maar even via abort
abort_with_warning("User identification '{0}' is not unique".format(username));
}
oRs.Close();
if (result.user_key > 0)