famedly / uia-proxy

GNU Affero General Public License v3.0
0 stars 0 forks source link

fix: don't escape uppercase characters in ldapEscape - [merged] #151

Closed famedly-bot closed 1 year ago

famedly-bot commented 1 year ago

In GitLab by @kate-shine on May 9, 2023, 18:58

_Merges shine/ldap_escapefix -> 0.7

famedly-bot commented 1 year ago

In GitLab by @kate-shine on May 9, 2023, 19:11

added 1 commit

Compare with previous version

famedly-bot commented 1 year ago

In GitLab by @kate-shine on May 9, 2023, 20:02

mentioned in issue undefined##undefined

famedly-bot commented 1 year ago

In GitLab by @kate-shine on May 9, 2023, 20:04

fixes https://gitlab.com/famedly/company/product-management/-/issues/977

famedly-bot commented 1 year ago

In GitLab by @ghost on May 10, 2023, 07:41

Commented on src/passwordproviders/passwordprovider_ldap.ts line 342

So this is meant to be used with mxids, right? Afaict, it's incorrectly used in several other places too, including for usernames that we stick in the database, so there's a risk that changing how this function works will break a lot of things elsewhere. We will need to test very thoroughly if we go through with this change.

famedly-bot commented 1 year ago

In GitLab by @ghost on May 10, 2023, 09:20

Approved after discussion

famedly-bot commented 1 year ago

In GitLab by @ghost on May 10, 2023, 09:20

approved this merge request

famedly-bot commented 1 year ago

In GitLab by @ghost on May 10, 2023, 09:20

resolved all threads

famedly-bot commented 1 year ago

In GitLab by @jdreichmann on May 10, 2023, 15:44

We need this in main/0.8.x aswell..

famedly-bot commented 1 year ago

In GitLab by @jdreichmann on May 10, 2023, 15:47

see https://gitlab.com/famedly/company/backend/services/uia-proxy/-/blob/main/src/passwordproviders/passwordprovider_ldap.ts#L437 (main) (@kate-shine)

famedly-bot commented 1 year ago

In GitLab by @jcgruenhage on May 10, 2023, 15:50

mentioned in issue undefined##undefined

famedly-bot commented 1 year ago

In GitLab by @kate-shine on May 10, 2023, 17:20

Yep, I knew about it, I just thought UKF needs 0.7 and rushed that one more. I hate split versions :/