fixed #129 - auth bypass when user.require is not set

This commit is contained in:
Eugene Pankov 2022-06-10 07:15:43 +02:00
parent 89e93c1ac9
commit d771fa09e4
No known key found for this signature in database
GPG key ID: 5896FCBBDD1CF4F4

View file

@ -186,11 +186,13 @@ impl ConfigProvider for FileConfigProvider {
return Ok(AuthResult::Rejected);
}
}
None => {
return Ok(AuthResult::Accepted {
None => Ok(if !valid_credentials.is_empty() {
AuthResult::Accepted {
username: user.username.clone(),
})
}
}
} else {
AuthResult::Rejected
}),
}
}