mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-07-12 13:23:29 +00:00
SEC-2618: LdapAuthenticationProviderConfigurer passwordAttribute null check
If LdapAuthenticationProviderConfigurer passwordAttribute is null, do not set on the PasswordComparisonAuthenticator
This commit is contained in:
parent
47e02c41b6
commit
63d1b531a1
@ -150,7 +150,9 @@ public class LdapAuthenticationProviderConfigurer<B extends ProviderManagerBuild
|
|||||||
*/
|
*/
|
||||||
private PasswordComparisonAuthenticator createPasswordCompareAuthenticator(BaseLdapPathContextSource contextSource) {
|
private PasswordComparisonAuthenticator createPasswordCompareAuthenticator(BaseLdapPathContextSource contextSource) {
|
||||||
PasswordComparisonAuthenticator ldapAuthenticator = new PasswordComparisonAuthenticator(contextSource);
|
PasswordComparisonAuthenticator ldapAuthenticator = new PasswordComparisonAuthenticator(contextSource);
|
||||||
|
if(passwordAttribute != null) {
|
||||||
ldapAuthenticator.setPasswordAttributeName(passwordAttribute);
|
ldapAuthenticator.setPasswordAttributeName(passwordAttribute);
|
||||||
|
}
|
||||||
ldapAuthenticator.setPasswordEncoder(passwordEncoder);
|
ldapAuthenticator.setPasswordEncoder(passwordEncoder);
|
||||||
return ldapAuthenticator;
|
return ldapAuthenticator;
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user