summaryrefslogtreecommitdiffstats
path: root/web/lib
diff options
context:
space:
mode:
authorLukas Fleischer <lfleischer@archlinux.org>2019-04-27 14:46:50 +0200
committerLukas Fleischer <lfleischer@archlinux.org>2019-04-28 14:58:29 +0200
commitdd11321fa362b357cdd12039ae11ec19c3d72fae (patch)
tree437604790f05d02b82bf9835fe66578511fa5ba9 /web/lib
parente3ca3c96e5fe87d6ea8123b02ea037cf8255adb9 (diff)
downloadaur-dd11321fa362b357cdd12039ae11ec19c3d72fae.tar.gz
aur-dd11321fa362b357cdd12039ae11ec19c3d72fae.tar.xz
git-auth: deny login if no password has been set
After creating a new account, users need to verify their email address and set an initial password. Without setting a password, users cannot use their account on the web interface. However, when logging in via SSH, we did not check whether the account is verified. Fix this by only allowing SSH access once a password is set. Reported-by: Pat Hogan <pathtofile@gmail.com> Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
Diffstat (limited to 'web/lib')
0 files changed, 0 insertions, 0 deletions