Merged in paulis/processmaker/PM-2795 (pull request #2238)
PM-2795: al autentificarse con REST no verifica contra el LdapAdvanced
This commit is contained in:
@@ -190,8 +190,14 @@ class PmPdo implements \OAuth2\Storage\AuthorizationCodeInterface,
|
|||||||
/* OAuth2_Storage_UserCredentialsInterface */
|
/* OAuth2_Storage_UserCredentialsInterface */
|
||||||
public function checkUserCredentials($username, $password)
|
public function checkUserCredentials($username, $password)
|
||||||
{
|
{
|
||||||
if ($user = $this->getUser($username)) {
|
$RBAC = \RBAC::getSingleton();
|
||||||
return $this->checkPassword($user, $password);
|
$RBAC->initRBAC();
|
||||||
|
$uid = $RBAC->VerifyLogin($username , $password);
|
||||||
|
if($uid < 0){
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
if($uid != ''){
|
||||||
|
return true;
|
||||||
}
|
}
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user