Commits on Nov 25, 2019

1. LDAP & PAM added to OAuth password grant strategy (mastodon#7999) …

   When authenticating via OAuth, the resource owner password grant
   strategy is allowed by Mastodon, but (without this PR), it does not
   attempt to authenticate against LDAP or PAM. As a result, LDAP or PAM
   authenticated users cannot sign in to Mastodon with their
   email/password credentials via OAuth (for instance, for native/mobile
   app users).
   
   This PR fleshes out the authentication strategy supplied to doorkeeper
   in its initializer by looking up the user with LDAP and/or PAM when
   devise is configured to use LDAP/PAM backends. It attempts to follow the
   same logic as the Auth::SessionsController for handling email/password
   credentials.
   
   Note mastodon#1: Since this pull request affects an initializer, it's unclear
   how to add test automation.
   
   Note mastodon#2: The PAM authentication path has not been manually tested. It
   was added for completeness sake, and it is hoped that it can be manually
   tested before merging.

   

   ntl-purism committed Nov 25, 2019
   Configuration menu

   • View commit details
   • Copy full SHA for dfb3492
   • Browse repository at this point

   Copy the full SHA

   dfb3492 View commit details

   Browse the repository at this point in the history