New Issue

Upgrade to 2.8.3 #1

Closed

opened 3 years ago by raucao · 1 comments

raucao commented 3 years ago

Owner

https://github.com/tootsuite/mastodon/releases/tag/v2.8.3

greg commented 3 years ago

Owner

Closing this one, we're on 2.9.3

greg closed this issue 3 years ago

raucao referenced this issue from a commit 2 years ago

LDAP & PAM added to OAuth password grant strategy (#7999) (#12390) When authenticating via OAuth, the resource owner password grant strategy is allowed by Mastodon, but (without this PR), it does not attempt to authenticate against LDAP or PAM. As a result, LDAP or PAM authenticated users cannot sign in to Mastodon with their email/password credentials via OAuth (for instance, for native/mobile app users). This PR fleshes out the authentication strategy supplied to doorkeeper in its initializer by looking up the user with LDAP and/or PAM when devise is configured to use LDAP/PAM backends. It attempts to follow the same logic as the Auth::SessionsController for handling email/password credentials. Note #1: Since this pull request affects an initializer, it's unclear how to add test automation. Note #2: The PAM authentication path has not been manually tested. It was added for completeness sake, and it is hoped that it can be manually tested before merging.

Sign in to join this conversation.

No Milestone

No Assignees

2 Participants

Notifications

Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.