From e98751b5184a9b0b0c01fd17b9c5a177fec90b42 Mon Sep 17 00:00:00 2001 From: "Stanislav N. aka pztrn" Date: Sun, 8 Sep 2019 00:34:44 +0500 Subject: [PATCH] Fail when provided credentials are wrong and actually use default group. --- inn2-fudforum-auth.go | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/inn2-fudforum-auth.go b/inn2-fudforum-auth.go index 6033153..a7f19d6 100644 --- a/inn2-fudforum-auth.go +++ b/inn2-fudforum-auth.go @@ -133,10 +133,14 @@ func main() { log.Printf("Password stored in database: %s, we hashed: %s (pre: %s)\n", dbData.Password, saltedPassHash, passHash) } + if dbData.Password != saltedPassHash { + os.Exit(1) + } + // Check groups mapping. // This is temporary, in future versions all groups memberships // should be managed on FUDForum side. - var group string + group := configuration.Cfg.Groups.Default for _, groupMapping := range configuration.Cfg.Groups.Groups { var userFound bool for _, user := range groupMapping.Users {