diff options
author | Joas Schilling <coding@schilljs.com> | 2022-03-10 17:28:01 +0300 |
---|---|---|
committer | backportbot[bot] <backportbot[bot]@users.noreply.github.com> | 2022-03-11 14:19:19 +0300 |
commit | 579f07ee2a525eab161da10280ab0cc26f85df64 (patch) | |
tree | a1425ebfc3a096dce47b483bf806a0fd0cbd87e2 /core/Command | |
parent | a96cb00505dc927a3d789c3fc283737eeb4e3014 (diff) |
Validate the password before generating an apptoken
Signed-off-by: Joas Schilling <coding@schilljs.com>
Diffstat (limited to 'core/Command')
-rw-r--r-- | core/Command/User/AddAppPassword.php | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/core/Command/User/AddAppPassword.php b/core/Command/User/AddAppPassword.php index 34c8dc67ccc..4f636c406fb 100644 --- a/core/Command/User/AddAppPassword.php +++ b/core/Command/User/AddAppPassword.php @@ -109,8 +109,10 @@ class AddAppPassword extends Command { return 1; } - $output->writeln('<info>The password is not validated so what you provide is what gets recorded in the token</info>'); - + if (!$this->userManager->checkPassword($user->getUID(), $password)) { + $output->writeln('<error>The provided password is invalid</error>'); + return 1; + } $token = $this->random->generate(72, ISecureRandom::CHAR_UPPER.ISecureRandom::CHAR_LOWER.ISecureRandom::CHAR_DIGITS); $generatedToken = $this->tokenProvider->generateToken( |