From 35c103648d385f3b137ab6a5e7a732c607886e93 Mon Sep 17 00:00:00 2001 From: Johannes Nau Date: Thu, 11 Apr 2024 12:57:38 +0000 Subject: [PATCH] hotfix: fix ldap which allowed to login as any user with any password --- services/auth/src/authenticationSources/ldap.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/auth/src/authenticationSources/ldap.ts b/services/auth/src/authenticationSources/ldap.ts index d0e8bf44..41fe8c8f 100644 --- a/services/auth/src/authenticationSources/ldap.ts +++ b/services/auth/src/authenticationSources/ldap.ts @@ -16,7 +16,7 @@ export class LdapAuthenticationSource implements AuthenticationSource { ): Promise< { success: true; needsProvisioning: boolean; user: UserModel } | { success: false } > { - const canBind = this.ldap_bind(username, password); + const canBind = await this.ldap_bind(username, password); if (!canBind) { return { success: false }; }