search

NUBIC / aker

A flexible security framework for Rack (and Rails) apps. Good for integration with legacy systems, CAS SSO (including proxying), machine and interactive authentication, and much more.
MIT License
1 stars 2 forks source link

Trim whitespace from usernames #16

Open rsutphin opened 12 years ago

rsutphin commented 12 years ago

Leading or trailing whitespace in a username is never significant. Aker should remove any present before validating credentials.

This could be done generically at the composite authority level so that individual authorities and modes don't have to duplicate the logic.

hannahwhy commented 11 years ago

An update: we saw an instance of this occurring in one of our CAS-using applications today. The CAS server recognized a username of the form [SPACE]name, but the application didn't.