kiran-authentication-service/0009-fix-multi-factor-multi-factor-no-jump-login.patch
liuxinhao d706e3ef4f 更新部分问题:
- 多因子登录禁止跳转登录
- 修复更新默认认证设备的逻辑,更新翻译
- 多因子认证,处理只有密码认证的情况
- 设备适配器不更新不存在的默认设备
2023-06-02 15:21:40 +08:00

30 lines
983 B
Diff

From 9046f70a621f92a9eab590e380768b74d897d43e Mon Sep 17 00:00:00 2001
From: liuxinhao <liuxinhao@kylinsec.com.cn>
Date: Fri, 2 Jun 2023 15:09:15 +0800
Subject: [PATCH 9/9] fix(multi-factor): multi-factor no jump login
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
- 多因子登录禁止跳转登录
---
src/daemon/session.cpp | 2 ++
1 file changed, 2 insertions(+)
diff --git a/src/daemon/session.cpp b/src/daemon/session.cpp
index 291f9fc..5144da1 100644
--- a/src/daemon/session.cpp
+++ b/src/daemon/session.cpp
@@ -57,6 +57,8 @@ Session::Session(uint32_t sessionID,
if (m_authMode == KAD_AUTH_MODE_AND)
{
this->m_authOrderWaiting = authTypes;
+ // 多因子认证时,不允许调整用户登录
+ this->m_verifyInfo.m_authenticatedUserName = m_userName;
}
KLOG_DEBUG() << QString("new session authmode(%1),login user switchable(%2),default auth type(%3),auth order(%4)")
--
2.33.0