fix(migrations): Set user password_digest only if it was received

bigbluebutton / greenlight

A really simple end-user interface for your BigBlueButton server.

GNU Lesser General Public License v3.0

789 stars 3.8k forks source link

fix(migrations): Set user password_digest only if it was received #5763

Open danimo opened 5 months ago

danimo commented 5 months ago

This fixes situations where after a migration from v2 due to a peculiar behavior, which refuses empty passwords but not empty password hashes, could end up with an empty password.

sonarcloud[bot] commented 5 months ago

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.4% Duplication on New Code

See analysis details on SonarCloud

danimo commented 1 month ago

Can you please merge this? it's still security relevant.

sonarcloud[bot] commented 1 month ago

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud