Skip to content
This repository was archived by the owner on Jan 29, 2020. It is now read-only.

Pass with append string still valid #43

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snapshotpl
Copy link
Contributor

Adding string to correct basic token still allow to pass token when using crypt.


public function testResolveNoValidPasswordWithPrependSign()
{
list($username, $password) = explode(':', base64_decode(base64_encode('admink:admin').'X'));
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This test is pretty much invalid. base64_decode drops X here because it does not form full octet.

@Xerkus
Copy link
Member

Xerkus commented May 13, 2019

What you show here apears to be result of non-strict mode of base64_decode() in Http adapter, which silently drops invalid portions of base64 encoded string

@weierophinney
Copy link
Member

This repository has been closed and moved to laminas/laminas-authentication; a new issue has been opened at laminas/laminas-authentication#1.

@weierophinney
Copy link
Member

This repository has been moved to laminas/laminas-authentication. If you feel that this patch is still relevant, please re-open against that repository, and reference this issue. To re-open, we suggest the following workflow:

  • Squash all commits in your branch (git rebase -i origin/{branch})
  • Make a note of all changed files (`git diff --name-only origin/{branch}...HEAD
  • Run the laminas/laminas-migration tool on the code.
  • Clone laminas/laminas-authentication to another directory.
  • Copy the files from the second bullet point to the clone of laminas/laminas-authentication.
  • In your clone of laminas/laminas-authentication, commit the files, push to your fork, and open the new PR.
    We will be providing tooling via laminas/laminas-migration soon to help automate the process.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants