nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-07-02 16:42:50 -05:00
Code Activity

security stamp validation for passwordless login

Browse Source
This commit is contained in:
Kyle Spearrin
2019-01-17 16:07:24 -05:00
parent 82ba3e4c30
commit e7e0d17ac6
2 changed files with 32 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
src/Core/Identity/ReadOnlyEnvIdentityUserStore.cs
View File

@ -1,4 +1,4 @@
using System.Linq;
using System.Collections.Generic;
using System.Threading;
using System.Threading.Tasks;
using Bit.Core.Utilities;
@ -26,22 +26,38 @@ namespace Bit.Core.Identity
}
var users = usersCsv.ToLowerInvariant().Split(',');
var user = users.Where(a => a.Trim() == normalizedEmail).FirstOrDefault();
if(user == null || !user.Contains("@"))
var usersDict = new Dictionary<string, string>();
foreach(var u in users)
{
var parts = u.Split(':');
if(parts.Length == 2)
{
var email = parts[0].Trim();
var stamp = parts[1].Trim();
usersDict.Add(email, stamp);
}
else
{
var email = parts[0].Trim();
usersDict.Add(email, email);
}
}
var userStamp = usersDict.ContainsKey(normalizedEmail) ? usersDict[normalizedEmail] : null;
if(userStamp == null)
{
return Task.FromResult<IdentityUser>(null);
}
user = user.Trim();
return Task.FromResult(new IdentityUser
{
Id = user,
Email = user,
NormalizedEmail = user,
Id = normalizedEmail,
Email = normalizedEmail,
NormalizedEmail = normalizedEmail,
EmailConfirmed = true,
UserName = user,
NormalizedUserName = user,
SecurityStamp = user
UserName = normalizedEmail,
NormalizedUserName = normalizedEmail,
SecurityStamp = userStamp
});
}