[daisy] [JIRA] Updated: (DSY-638) Security fix: make username and password required.

[Karel Vervaeke (JIRA)]

     [ http://issues.cocoondev.org//browse/DSY-638?page=all ]

Karel Vervaeke updated DSY-638:
-------------------------------

    Attachment: improved_auth_security.patch

This patch prevents empty usernames and passwords from being sent to the authentication schemes

> Security fix: make username and password required.
> --------------------------------------------------
>
>          Key: DSY-638
>          URL: http://issues.cocoondev.org//browse/DSY-638
>      Project: Daisy
>         Type: Bug
>     Reporter: Karel Vervaeke
>     Priority: Minor
>  Attachments: improved_auth_security.patch
>
> Normally, it is the task of the AuthenticationSchemes to check username and password.
> To prevent unwanted behaviour from certain authentication schemes, we should never send empty username and passwords to the authentication schemes.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.cocoondev.org//secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira