Merge pull request #28489 from nextcloud/backport/28413/stable22

[stable22] Emit an error log when the app token login name does not match
pull/28499/head
Julius Härtl 5 years ago committed by GitHub
commit 67cbb0318d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 7
      lib/private/User/Session.php

@ -788,9 +788,14 @@ class Session implements IUserSession, Emitter {
// Check if login names match
if (!is_null($user) && $dbToken->getLoginName() !== $user) {
// TODO: this makes it imposssible to use different login names on browser and client
// TODO: this makes it impossible to use different login names on browser and client
// e.g. login by e-mail 'user@example.com' on browser for generating the token will not
// allow to use the client token with the login name 'user'.
$this->logger->error('App token login name does not match', [
'tokenLoginName' => $dbToken->getLoginName(),
'sessionLoginName' => $user,
]);
return false;
}

Loading…
Cancel
Save