Changeset 322 in code for trunk

Timestamp:

Jun 6, 2020, 10:52:22 AM (5 years ago)

Author:

contact

Message:

Fail auth on empty password in DB

File:

• trunk/downstream.go (modified) (1 diff)

trunk/downstream.go

@@ -686 +686 @@
         if err != nil {
                 dc.logger.Printf("failed authentication for %q: %v", username, err)
+                return errAuthFailed
+        }
+
+        // Password auth disabled
+        if u.Password == "" {
                 return errAuthFailed
         }