Skip to content

Throwing BadCredentialsException when user is not found in configured…#1740

Merged
zabil merged 2 commits intogocd:masterfrom
jyotisingh:fixing_login_error_message
Jan 5, 2016
Merged

Throwing BadCredentialsException when user is not found in configured…#1740
zabil merged 2 commits intogocd:masterfrom
jyotisingh:fixing_login_error_message

Conversation

@jyotisingh
Copy link
Contributor

… ldap so a potential attacker would not be able to differentiate between non-existent user or a wrong password.

… ldap so an attacker would not be able to guess available logins on the ldap server
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We must start using http://junit.org/apidocs/org/junit/rules/ExpectedException.html
For asserting exceptions.

@zabil zabil added this to the Release 16.1 milestone Jan 5, 2016
zabil added a commit that referenced this pull request Jan 5, 2016
Throwing BadCredentialsException when user is not found in configured…
@zabil zabil merged commit 3e0538d into gocd:master Jan 5, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants