Fix for potential false password validation

jusbuc2k / Justin.AspNetCore.LdapAuthentication

LDAP based password authentication for ASP.NET Identity

MIT License

57 stars 19 forks source link

Fix for potential false password validation #4

Closed HowardPWardinkle closed 7 years ago

HowardPWardinkle commented 7 years ago

When doing some testing with the Novel package, if you do a bind with an invalid dn and empty password, it will not throw an exception, but the Bound property will be false. Since this is wrapped by the UserManager it will probably not be possible, but thought I'd pass along the fix. -- Thanks.

jusbuc2k commented 7 years ago

Good catch.

jusbuc2k commented 7 years ago

I have merged this and published version 2.0.0 on NuGet with the fix. https://www.nuget.org/packages/Justin.AspNetCore.LdapAuthentication/2.0.0