filestash icon indicating copy to clipboard operation
filestash copied to clipboard

[bug] password_only passthrough not working

Open e2489 opened this issue 1 year ago • 0 comments

Description of the bug

The password_only strategy for passthrough is not working as intended. If you fill in the password in attribute mapping, the login accepts any password and logs you in, even if it's wrong. If you leave the password blank in attribute mapping, any password (including the correct one) gives you "Oops! Invalid account".

Step by step instructions to reproduce the bug

  • Add the SFTP backend, add the passthrough middleware, and select password_only
  • Fill in the SFTP information
  • Attempt to log in to the SFTP server with the password

Can you replicate that error from the demo?

Can't test the backend

Observed behavior

It either logs you in with any password, or doesn't log you in at all.

Expected behavior

I fill in attribute mapping, they type the given password for the specified SFTP user, and it logs them in. If the password is wrong, it doesn't.

e2489 avatar May 02 '23 03:05 e2489