dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Check sub of UserInfo JSON (references #183)

Browse Source
This commit is contained in:
Clément Oudot 2015-01-31 14:33:05 +00:00
parent bb69d7c255
commit 3c3cc39d0c
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/UserDBOpenIDConnect.pm
View File

@ -39,6 +39,12 @@ sub getUser {
$self->{tmp}->{OpenIDConnect_user_info} =
$self->decodeJSON($userinfo_content);
# Check that received sub is the same than current user
unless ( $self->{tmp}->{OpenIDConnect_user_info}->{sub} eq $self->{user} ) {
$self->lmLog( "Received sub do not match current user", 'error' );
return PE_BADCREDENTIALS;
}
PE_OK;
}