Merge pull request from GHSA-g28r-8wg3-7349

passwords
thm-mni-ii · Jun 22, 2023 · 8d89612 · 8d89612
1 parent 3fd477d
commit 8d89612
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/modules/fbs-core/api/src/main/scala/de/thm/ii/fbs/controller/LoginController.scala b/modules/fbs-core/api/src/main/scala/de/thm/ii/fbs/controller/LoginController.scala
@@ -118,11 +118,11 @@ class LoginController extends CasClientConfigurerAdapter {
         password <- jsonNode.retrive("password").asText()
         ldapUser <- ldapService.login(username, password)
         user <- loadUserFromLdap(ldapUser.getAttribute("uid").getStringValue)
-      } yield (user, password)
+      } yield user
 
       login match {
-        case Some((user, password)) =>
-          val localUser = userService.find(user.username).getOrElse(userService.create(user, password))
+        case Some((user)) =>
+          val localUser = userService.find(user.username).getOrElse(userService.create(user, null))
           authService.renewAuthentication(localUser, response)
         case None => throw new UnauthorizedException()
       }