Merge pull request #14 from chhemme/patch-1

Ignore authentication requests with empty username
2020-03-23 09:50:45 -06:00
parent 30edba01ed d667a1b3d9
commit 6f88298c94
1 changed files with 6 additions and 0 deletions
--- a/login-ldap.php
+++ b/login-ldap.php
@@ -70,6 +70,12 @@ class LoginLDAPPlugin extends Plugin
    {
        $credentials = $event->getCredentials();
        
+        // empty username -> ignore
+        if($credentials['username'] == ''){
+            $event->setStatus($event::AUTHENTICATION_FAILURE);
+            return;
+        }
+
        // Get Proper username
        $user_dn            = $this->config->get('plugins.login-ldap.user_dn');
        $search_dn          = $this->config->get('plugins.login-ldap.search_dn');