Skip to content

PR 911+910+904 hotfixes to mgage new_develop_candidate_01_01_2019#23

Merged
mgage merged 5 commits into
mgage:new_develop_candidate_01_01_2019from
taniwallach:tani_forbid_whitespace_and_empty_passwords_during_checkPassword
Jan 10, 2019
Merged

PR 911+910+904 hotfixes to mgage new_develop_candidate_01_01_2019#23
mgage merged 5 commits into
mgage:new_develop_candidate_01_01_2019from
taniwallach:tani_forbid_whitespace_and_empty_passwords_during_checkPassword

Conversation

@taniwallach
Copy link
Copy Markdown

These are the same hotfixes recently merged into master, but into your new_develop_candidate_01_01_2019

mgage and others added 5 commits January 1, 2019 11:10
Remove contents of webwork2/htdocs/tmp when restarting webwork inside docker
This is an extremely small change that fixes the file uploaded successfully message.  To test upload a file using the file manager.  After the patch the file name should be displayed correctly.
…cepting

empty or all white-space password even if they happen to match the crypted
password in the database. (In certain settings such as LTI authentication and
LDAP authentication, and when wwassignment is being used, some users may have
such a null password.)

Since the function is called as a fallback by some of the other authentication modules
which do not "trim" the possibleClearPassword being sent for testing (unlike what is
done in get_credentials() in lib/WeBWorK/Authen.pm), we explicitly test for a non-space
character and don't only reject the possibleClearPassword when it is an empty string.

This is intended to address the issue reported in the forums
http://webwork.maa.org/moodle/mod/forum/discuss.php?d=4529 .
as an undef value of $self->{password} is needed for the
authenticate() function to detect session-timeout.

2. Prevent the localized "inactivity timeout" error message from
being overridden by an "authentication failed" error message
when it should not be overriden.
@mgage
Copy link
Copy Markdown
Owner

mgage commented Jan 10, 2019

Thanks Tani. This looks good.

@mgage mgage merged commit 01cba1e into mgage:new_develop_candidate_01_01_2019 Jan 10, 2019
@taniwallach taniwallach deleted the tani_forbid_whitespace_and_empty_passwords_during_checkPassword branch May 23, 2019 14:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants