Uploaded image for project: 'Magnolia'
  1. Magnolia
  2. MAGNOLIA-5747

Blank username (e.g. from basic auth headers) throws exception

    XMLWordPrintable

Details

    • Bug
    • Resolution: Won't Do
    • Minor
    • None
    • 4.5.13, 5.2.3
    • core, security
    • None

    Description

      Simple patch to add a guard statement for blank user names in MgnlUserManager::getUser(). A misconfigured external script using basic auth without providing a user name was filling up our log files.

      On 4.5.x the error messages are using e.printStackTrace instead of a logger, meaning we can't silence them. It looks like that has been remedied in 5.x, though.

      Checklists

        Acceptance criteria

        Attachments

          Activity

            People

              Unassigned Unassigned
              cj32@txstate.edu Charles Jones
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Checklists

                  Bug DoR
                  Task DoD