generator-jhipster
generator-jhipster copied to clipboard
Fix: Address User-Controlled Data Risk in isAuthenticated()
Related to https://github.com/jhipster/generator-jhipster/issues/27051
For enhancing application security, this PR modifies the isAuthenticated() endpoint to return a boolean indicating the authentication status instead of a potentially user-controlled value (principal.getName()). This change mitigates the risk of reflecting user-controlled data and strengthens the security of the application.
Please make sure the below checklist is followed for Pull Requests.
- [ ] All continuous integration tests are green
- [ ] Tests are added where necessary
- [ ] The JDL part is updated if necessary
- [ ] jhipster-online is updated if necessary
- [ ] Documentation is added/updated where necessary
- [ ] Coding Rules & Commit Guidelines as per our CONTRIBUTING.md document are followed
If the PR is not ready for review, please consider converting it to a Draft. You can also add the skip-ci label to prevent CI build on branch.
Any updates? Builds are currently failing.
I guess https://github.com/jhipster/generator-jhipster/issues/27051 is fixed by https://github.com/jhipster/generator-jhipster/pull/28729 @mraible