Basic http auth not allowed for os auth provider.

ajenti · Jan 31, 2023 · a663fec · a663fec
1 parent ce72a85
commit a663fec
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/ajenti-core/aj/gate/middleware.py b/ajenti-core/aj/gate/middleware.py
@@ -187,8 +187,10 @@ def handle(self, http_context):
             authresp = False
 
             try:
-                username,pw = base64.b64decode(authorization_header.replace('Basic ', '')).decode().split(':')
-                authresp = AuthenticationService.get(self.context).get_provider().authenticate(username, pw)
+                auth_provider = AuthenticationService.get(self.context).get_provider()
+                if auth_provider.id != 'os':
+                    username,pw = base64.b64decode(authorization_header.replace('Basic ', '')).decode().split(':')
+                    authresp = auth_provider.authenticate(username, pw)
             except Exception as e:
                 pass