Don't attempt transparent authentication if we don't have a backend p…

…assword
horde · Jul 11, 2014 · 1c63a64 · 1c63a64
1 parent 9e6d01c
commit 1c63a64
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/imp/lib/Auth.php b/imp/lib/Auth.php
@@ -113,6 +113,11 @@ static public function transparent($auth_ob)
             $credentials['userId'] = $auth_ob->getCredential('userId');
         }
 
+        if (!isset($credentials['password']) ||
+            !strlen($credentials['password'])) {
+            return false;
+        }
+
         try {
             self::authenticate($credentials);
         } catch (Horde_Auth_Exception $e) {