diff options
| author | Lukas Fleischer <lfleischer@archlinux.org> | 2019-04-27 14:46:50 +0200 |
|---|---|---|
| committer | Lukas Fleischer <lfleischer@archlinux.org> | 2019-04-28 14:58:29 +0200 |
| commit | dd11321fa362b357cdd12039ae11ec19c3d72fae (patch) | |
| tree | 437604790f05d02b82bf9835fe66578511fa5ba9 /aurweb/git/update.py | |
| parent | e3ca3c96e5fe87d6ea8123b02ea037cf8255adb9 (diff) | |
| download | aur-dd11321fa362b357cdd12039ae11ec19c3d72fae.tar.gz aur-dd11321fa362b357cdd12039ae11ec19c3d72fae.tar.xz | |
git-auth: deny login if no password has been set
After creating a new account, users need to verify their email address
and set an initial password. Without setting a password, users cannot
use their account on the web interface. However, when logging in via
SSH, we did not check whether the account is verified.
Fix this by only allowing SSH access once a password is set.
Reported-by: Pat Hogan <pathtofile@gmail.com>
Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
Diffstat (limited to 'aurweb/git/update.py')
0 files changed, 0 insertions, 0 deletions