Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Do not allow OIDC user login by click "LOGIN VIA LOCAL DB" #17120

Open
geoger opened this issue Jul 5, 2022 · 1 comment
Open

Do not allow OIDC user login by click "LOGIN VIA LOCAL DB" #17120

geoger opened this issue Jul 5, 2022 · 1 comment
Labels
kind/requirement New feature or idea on top of harbor

Comments

@geoger
Copy link

geoger commented Jul 5, 2022

1)enable OIDC auth mode,
2)click "LOGIN VIA LOCAL DB" and input OIDC user name and password.
OIDC user could login, but would wizard find that he/she is the previous OIDC user
#17096

Suggest proposal solution.
when Click "LOGIN VIA LOCAL DB", if the input user name is actually is OIDC user type, do not allow he/she to login

@AllForNothing AllForNothing added the kind/requirement New feature or idea on top of harbor label Jul 6, 2022
@sangho5o5
Copy link

Have same problem here, but "LOGIN VIA LOCAL DB" input doesn't have to be OIDC input.
Any character, even single letter, can be used to login as previous OIDC user.

Steps to reproduce in my circumstance.

  1. login via OIDC provider
  2. logout
  3. login via local DB
  4. enter any letter to login as previous OIDC user, even single letter works

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/requirement New feature or idea on top of harbor
Projects
None yet
Development

No branches or pull requests

3 participants