mirror of
https://github.com/DeNNiiInc/dbgate.git
synced 2026-04-20 00:46:01 +00:00
security problem fix #1029
This commit is contained in:
@@ -218,7 +218,7 @@ class LoginsProvider extends AuthProviderBase {
|
|||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
||||||
if (password == process.env[`LOGIN_PASSWORD_${login}`]) {
|
if (password && password == process.env[`LOGIN_PASSWORD_${login}`]) {
|
||||||
return {
|
return {
|
||||||
accessToken: jwt.sign(
|
accessToken: jwt.sign(
|
||||||
{
|
{
|
||||||
|
|||||||
Reference in New Issue
Block a user