Feeling Lucky
No Code Attached Yet
[#30620] - [3] Incorrect message when not providing credentials to Gmail Auth Plugin
- Closed
- 18 Aug 2021
- Medium
- Build: staging
- # 30620
Steps to reproduce the issue
Code review here
The code is checking if the username or password is a blank string, and if either are, then it fails authentication with a message, the bug is that the message says they are blacklisted, which is incorrect.
Expected result
A message that says that the provided credentials cannot be blank.
Actual result
The resultant string says JGLOBAL_AUTH_USER_BLACKLISTED, which is not accurate. The user is NOT blacklisted (blacklisting is checked later on line 66 and results in a correct error if blacklisted.)
System information (as much as possible)
Joomla 3.9.x
joomla-cms-bot
- | Labels |
Added:
?
|
||
| Status | New | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2021-08-18 08:55:23 |
| Closed_By | ⇒ | PhilETaylor | |
| Labels |
Added:
No Code Attached Yet
Removed: ? |
||
Gmail Auth Plugin no longer a feature in Joomla 4
Maybe one dat @joomla/security will also fix the security issue - been over a year now... maybe its time for disclosure.