Commit 067da622 authored by Brian Neel's avatar Brian Neel

fix shibboleth misconfigurations resulting in authentication bypass

parent a3fd8521
---
title: fix shibboleth misconfigurations resulting in authentication bypass
merge_request: 7428
author:
...@@ -254,6 +254,10 @@ Devise.setup do |config| ...@@ -254,6 +254,10 @@ Devise.setup do |config|
end end
end end
if provider['name'] == 'shibboleth'
provider['args'][:fail_with_empty_uid] = true
end
# A Hash from the configuration will be passed as is. # A Hash from the configuration will be passed as is.
provider_arguments << provider['args'].symbolize_keys provider_arguments << provider['args'].symbolize_keys
end end
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment