mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Dont create a log entry on email login 

Signed-off-by: Joas Schilling <coding@schilljs.com>
This commit is contained in:
Joas Schilling 2017-01-12 12:38:45 +01:00
parent 536650c02f
commit 7ad791efb4
No known key found for this signature in database
GPG Key ID: E166FD8976B3BAC8
3 changed files with 83 additions and 58 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
core/Controller/LoginController.php
View File

@ -40,6 +40,7 @@ use OCP\AppFramework\Http\RedirectResponse;
use OCP\AppFramework\Http\TemplateResponse; use OCP\AppFramework\Http\TemplateResponse;
use OCP\Authentication\TwoFactorAuth\IProvider; use OCP\Authentication\TwoFactorAuth\IProvider;
use OCP\IConfig; use OCP\IConfig;
use OCP\ILogger;
use OCP\IRequest; use OCP\IRequest;
use OCP\ISession; use OCP\ISession;
use OCP\IURLGenerator; use OCP\IURLGenerator;
@ -59,6 +60,8 @@ class LoginController extends Controller {
private $userSession; private $userSession;
/** @var IURLGenerator */ /** @var IURLGenerator */
private $urlGenerator; private $urlGenerator;
/** @var ILogger */
private $logger;
/** @var Manager */ /** @var Manager */
private $twoFactorManager; private $twoFactorManager;
/** @var Throttler */ /** @var Throttler */
@ -72,16 +75,18 @@ class LoginController extends Controller {
* @param ISession $session * @param ISession $session
* @param IUserSession $userSession * @param IUserSession $userSession
* @param IURLGenerator $urlGenerator * @param IURLGenerator $urlGenerator
* @param ILogger $logger
* @param Manager $twoFactorManager * @param Manager $twoFactorManager
* @param Throttler $throttler * @param Throttler $throttler
*/ */
function __construct($appName, public function __construct($appName,
IRequest $request, IRequest $request,
IUserManager $userManager, IUserManager $userManager,
IConfig $config, IConfig $config,
ISession $session, ISession $session,
IUserSession $userSession, IUserSession $userSession,
IURLGenerator $urlGenerator, IURLGenerator $urlGenerator,
ILogger $logger,
Manager $twoFactorManager, Manager $twoFactorManager,
Throttler $throttler) { Throttler $throttler) {
parent::__construct($appName, $request); parent::__construct($appName, $request);
@ -90,6 +95,7 @@ class LoginController extends Controller {
$this->session = $session; $this->session = $session;
$this->userSession = $userSession; $this->userSession = $userSession;
$this->urlGenerator = $urlGenerator; $this->urlGenerator = $urlGenerator;
$this->logger = $logger;
$this->twoFactorManager = $twoFactorManager; $this->twoFactorManager = $twoFactorManager;
$this->throttler = $throttler; $this->throttler = $throttler;
} }
@ -224,13 +230,15 @@ class LoginController extends Controller {
$originalUser = $user; $originalUser = $user;
// TODO: Add all the insane error handling // TODO: Add all the insane error handling
/* @var $loginResult IUser */ /* @var $loginResult IUser */
$loginResult = $this->userManager->checkPassword($user, $password); $loginResult = $this->userManager->checkPasswordNoLogging($user, $password);
if ($loginResult === false) { if ($loginResult === false) {
$users = $this->userManager->getByEmail($user); $users = $this->userManager->getByEmail($user);
// we only allow login by email if unique // we only allow login by email if unique
if (count($users) === 1) { if (count($users) === 1) {
$user = $users[0]->getUID(); $user = $users[0]->getUID();
$loginResult = $this->userManager->checkPassword($user, $password); $loginResult = $this->userManager->checkPassword($user, $password);
} else {
$this->logger->warning('Login failed: \''. $user .'\' (Remote IP: \''. $this->request->getRemoteAddress(). '\')', ['app' => 'core']);
} }
} }
if ($loginResult === false) { if ($loginResult === false) {

21
lib/private/User/Manager.php
View File

@ -185,9 +185,27 @@ class Manager extends PublicEmitter implements IUserManager {
* @return mixed the User object on success, false otherwise * @return mixed the User object on success, false otherwise
*/ */
public function checkPassword($loginName, $password) { public function checkPassword($loginName, $password) {
$result = $this->checkPasswordNoLogging($loginName, $password);
if ($result === false) {
\OC::$server->getLogger()->warning('Login failed: \''. $loginName .'\' (Remote IP: \''. \OC::$server->getRequest()->getRemoteAddress(). '\')', ['app' => 'core']);
}
return $result;
}
/**
* Check if the password is valid for the user
*
* @internal
* @param string $loginName
* @param string $password
* @return mixed the User object on success, false otherwise
*/
public function checkPasswordNoLogging($loginName, $password) {
$loginName = str_replace("\0", '', $loginName); $loginName = str_replace("\0", '', $loginName);
$password = str_replace("\0", '', $password); $password = str_replace("\0", '', $password);
foreach ($this->backends as $backend) { foreach ($this->backends as $backend) {
if ($backend->implementsActions(Backend::CHECK_PASSWORD)) { if ($backend->implementsActions(Backend::CHECK_PASSWORD)) {
$uid = $backend->checkPassword($loginName, $password); $uid = $backend->checkPassword($loginName, $password);
@ -197,7 +215,6 @@ class Manager extends PublicEmitter implements IUserManager {
} }
} }
\OC::$server->getLogger()->warning('Login failed: \''. $loginName .'\' (Remote IP: \''. \OC::$server->getRequest()->getRemoteAddress(). '\')', ['app' => 'core']);
return false; return false;
} }

108
tests/Core/Controller/LoginControllerTest.php
View File

@ -24,53 +24,51 @@ namespace Tests\Core\Controller;
use OC\Authentication\TwoFactorAuth\Manager; use OC\Authentication\TwoFactorAuth\Manager;
use OC\Core\Controller\LoginController; use OC\Core\Controller\LoginController;
use OC\Security\Bruteforce\Throttler; use OC\Security\Bruteforce\Throttler;
use OC\User\Session;
use OCP\AppFramework\Http\RedirectResponse; use OCP\AppFramework\Http\RedirectResponse;
use OCP\AppFramework\Http\TemplateResponse; use OCP\AppFramework\Http\TemplateResponse;
use OCP\IConfig; use OCP\IConfig;
use OCP\ILogger;
use OCP\IRequest; use OCP\IRequest;
use OCP\ISession; use OCP\ISession;
use OCP\IURLGenerator; use OCP\IURLGenerator;
use OCP\IUser; use OCP\IUser;
use OCP\IUserManager; use OCP\IUserManager;
use OCP\IUserSession;
use Test\TestCase; use Test\TestCase;
class LoginControllerTest extends TestCase { class LoginControllerTest extends TestCase {
/** @var LoginController */ /** @var LoginController */
private $loginController; private $loginController;
/** @var IRequest | \PHPUnit_Framework_MockObject_MockObject */ /** @var IRequest|\PHPUnit_Framework_MockObject_MockObject */
private $request; private $request;
/** @var IUserManager | \PHPUnit_Framework_MockObject_MockObject */ /** @var IUserManager|\PHPUnit_Framework_MockObject_MockObject */
private $userManager; private $userManager;
/** @var IConfig | \PHPUnit_Framework_MockObject_MockObject */ /** @var IConfig|\PHPUnit_Framework_MockObject_MockObject */
private $config; private $config;
/** @var ISession | \PHPUnit_Framework_MockObject_MockObject */ /** @var ISession|\PHPUnit_Framework_MockObject_MockObject */
private $session; private $session;
/** @var IUserSession | \PHPUnit_Framework_MockObject_MockObject */ /** @var Session|\PHPUnit_Framework_MockObject_MockObject */
private $userSession; private $userSession;
/** @var IURLGenerator | \PHPUnit_Framework_MockObject_MockObject */ /** @var IURLGenerator|\PHPUnit_Framework_MockObject_MockObject */
private $urlGenerator; private $urlGenerator;
/** @var Manager | \PHPUnit_Framework_MockObject_MockObject */ /** @var ILogger|\PHPUnit_Framework_MockObject_MockObject */
private $logger;
/** @var Manager|\PHPUnit_Framework_MockObject_MockObject */
private $twoFactorManager; private $twoFactorManager;
/** @var Throttler */ /** @var Throttler|\PHPUnit_Framework_MockObject_MockObject */
private $throttler; private $throttler;
public function setUp() { public function setUp() {
parent::setUp(); parent::setUp();
$this->request = $this->getMockBuilder('\\OCP\\IRequest')->getMock(); $this->request = $this->createMock(IRequest::class);
$this->userManager = $this->getMockBuilder('\\OCP\\IUserManager')->getMock(); $this->userManager = $this->createMock(\OC\User\Manager::class);
$this->config = $this->getMockBuilder('\\OCP\\IConfig')->getMock(); $this->config = $this->createMock(IConfig::class);
$this->session = $this->getMockBuilder('\\OCP\\ISession')->getMock(); $this->session = $this->createMock(ISession::class);
$this->userSession = $this->getMockBuilder('\\OC\\User\\Session') $this->userSession = $this->createMock(Session::class);
->disableOriginalConstructor() $this->urlGenerator = $this->createMock(IURLGenerator::class);
->getMock(); $this->logger = $this->createMock(ILogger::class);
$this->urlGenerator = $this->getMockBuilder('\\OCP\\IURLGenerator')->getMock(); $this->twoFactorManager = $this->createMock(Manager::class);
$this->twoFactorManager = $this->getMockBuilder('\OC\Authentication\TwoFactorAuth\Manager') $this->throttler = $this->createMock(Throttler::class);
->disableOriginalConstructor()
->getMock();
$this->throttler = $this->getMockBuilder('\OC\Security\Bruteforce\Throttler')
->disableOriginalConstructor()
->getMock();
$this->loginController = new LoginController( $this->loginController = new LoginController(
'core', 'core',
@ -80,6 +78,7 @@ class LoginControllerTest extends TestCase {
$this->session, $this->session,
$this->userSession, $this->userSession,
$this->urlGenerator, $this->urlGenerator,
$this->logger,
$this->twoFactorManager, $this->twoFactorManager,
$this->throttler $this->throttler
); );
@ -110,7 +109,7 @@ class LoginControllerTest extends TestCase {
->method('getCookie') ->method('getCookie')
->with('nc_token') ->with('nc_token')
->willReturn('MyLoginToken'); ->willReturn('MyLoginToken');
$user = $this->getMockBuilder('\\OCP\\IUser')->getMock(); $user = $this->createMock(IUser::class);
$user $user
->expects($this->once()) ->expects($this->once())
->method('getUID') ->method('getUID')
@ -217,7 +216,7 @@ class LoginControllerTest extends TestCase {
->method('getSystemValue') ->method('getSystemValue')
->with('lost_password_link') ->with('lost_password_link')
->willReturn(false); ->willReturn(false);
$user = $this->getMockBuilder('\\OCP\\IUser')->getMock(); $user = $this->createMock(IUser::class);
$user $user
->expects($this->once()) ->expects($this->once())
->method('canChangePassword') ->method('canChangePassword')
@ -255,7 +254,7 @@ class LoginControllerTest extends TestCase {
->method('getSystemValue') ->method('getSystemValue')
->with('lost_password_link') ->with('lost_password_link')
->willReturn(false); ->willReturn(false);
$user = $this->getMockBuilder('\\OCP\\IUser')->getMock(); $user = $this->createMock(IUser::class);
$user $user
->expects($this->once()) ->expects($this->once())
->method('canChangePassword') ->method('canChangePassword')
@ -289,7 +288,7 @@ class LoginControllerTest extends TestCase {
$loginPageUrl = 'some url'; $loginPageUrl = 'some url';
$this->request $this->request
->expects($this->exactly(4)) ->expects($this->exactly(5))
->method('getRemoteAddress') ->method('getRemoteAddress')
->willReturn('192.168.0.1'); ->willReturn('192.168.0.1');
$this->request $this->request
@ -310,7 +309,7 @@ class LoginControllerTest extends TestCase {
->method('registerAttempt') ->method('registerAttempt')
->with('login', '192.168.0.1', ['user' => 'MyUserName']); ->with('login', '192.168.0.1', ['user' => 'MyUserName']);
$this->userManager->expects($this->once()) $this->userManager->expects($this->once())
->method('checkPassword') ->method('checkPasswordNoLogging')
->will($this->returnValue(false)); ->will($this->returnValue(false));
$this->urlGenerator->expects($this->once()) $this->urlGenerator->expects($this->once())
->method('linkToRoute') ->method('linkToRoute')
@ -329,8 +328,8 @@ class LoginControllerTest extends TestCase {
} }
public function testLoginWithValidCredentials() { public function testLoginWithValidCredentials() {
/** @var IUser | \PHPUnit_Framework_MockObject_MockObject $user */ /** @var IUser|\PHPUnit_Framework_MockObject_MockObject $user */
$user = $this->getMockBuilder('\OCP\IUser')->getMock(); $user = $this->createMock(IUser::class);
$user->expects($this->any()) $user->expects($this->any())
->method('getUID') ->method('getUID')
->will($this->returnValue('uid')); ->will($this->returnValue('uid'));
@ -358,7 +357,7 @@ class LoginControllerTest extends TestCase {
->with('192.168.0.1') ->with('192.168.0.1')
->willReturn(200); ->willReturn(200);
$this->userManager->expects($this->once()) $this->userManager->expects($this->once())
->method('checkPassword') ->method('checkPasswordNoLogging')
->will($this->returnValue($user)); ->will($this->returnValue($user));
$this->userSession->expects($this->once()) $this->userSession->expects($this->once())
->method('login') ->method('login')
@ -391,8 +390,8 @@ class LoginControllerTest extends TestCase {
} }
public function testLoginWithValidCredentialsAndRememberMe() { public function testLoginWithValidCredentialsAndRememberMe() {
/** @var IUser | \PHPUnit_Framework_MockObject_MockObject $user */ /** @var IUser|\PHPUnit_Framework_MockObject_MockObject $user */
$user = $this->getMockBuilder('\OCP\IUser')->getMock(); $user = $this->createMock(IUser::class);
$user->expects($this->any()) $user->expects($this->any())
->method('getUID') ->method('getUID')
->will($this->returnValue('uid')); ->will($this->returnValue('uid'));
@ -417,7 +416,7 @@ class LoginControllerTest extends TestCase {
->with('192.168.0.1') ->with('192.168.0.1')
->willReturn(200); ->willReturn(200);
$this->userManager->expects($this->once()) $this->userManager->expects($this->once())
->method('checkPassword') ->method('checkPasswordNoLogging')
->will($this->returnValue($user)); ->will($this->returnValue($user));
$this->userSession->expects($this->once()) $this->userSession->expects($this->once())
->method('login') ->method('login')
@ -441,8 +440,8 @@ class LoginControllerTest extends TestCase {
} }
public function testLoginWithoutPassedCsrfCheckAndNotLoggedIn() { public function testLoginWithoutPassedCsrfCheckAndNotLoggedIn() {
/** @var IUser | \PHPUnit_Framework_MockObject_MockObject $user */ /** @var IUser|\PHPUnit_Framework_MockObject_MockObject $user */
$user = $this->getMockBuilder('\OCP\IUser')->getMock(); $user = $this->createMock(IUser::class);
$user->expects($this->any()) $user->expects($this->any())
->method('getUID') ->method('getUID')
->will($this->returnValue('jane')); ->will($this->returnValue('jane'));
@ -480,8 +479,8 @@ class LoginControllerTest extends TestCase {
} }
public function testLoginWithoutPassedCsrfCheckAndLoggedIn() { public function testLoginWithoutPassedCsrfCheckAndLoggedIn() {
/** @var IUser | \PHPUnit_Framework_MockObject_MockObject $user */ /** @var IUser|\PHPUnit_Framework_MockObject_MockObject $user */
$user = $this->getMockBuilder('\OCP\IUser')->getMock(); $user = $this->createMock(IUser::class);
$user->expects($this->any()) $user->expects($this->any())
->method('getUID') ->method('getUID')
->will($this->returnValue('jane')); ->will($this->returnValue('jane'));
@ -524,8 +523,8 @@ class LoginControllerTest extends TestCase {
} }
public function testLoginWithValidCredentialsAndRedirectUrl() { public function testLoginWithValidCredentialsAndRedirectUrl() {
/** @var IUser | \PHPUnit_Framework_MockObject_MockObject $user */ /** @var IUser|\PHPUnit_Framework_MockObject_MockObject $user */
$user = $this->getMockBuilder('\OCP\IUser')->getMock(); $user = $this->createMock(IUser::class);
$user->expects($this->any()) $user->expects($this->any())
->method('getUID') ->method('getUID')
->will($this->returnValue('jane')); ->will($this->returnValue('jane'));
@ -551,7 +550,7 @@ class LoginControllerTest extends TestCase {
->with('192.168.0.1') ->with('192.168.0.1')
->willReturn(200); ->willReturn(200);
$this->userManager->expects($this->once()) $this->userManager->expects($this->once())
->method('checkPassword') ->method('checkPasswordNoLogging')
->with('Jane', $password) ->with('Jane', $password)
->will($this->returnValue($user)); ->will($this->returnValue($user));
$this->userSession->expects($this->once()) $this->userSession->expects($this->once())
@ -574,8 +573,8 @@ class LoginControllerTest extends TestCase {
} }
public function testLoginWithOneTwoFactorProvider() { public function testLoginWithOneTwoFactorProvider() {
/** @var IUser | \PHPUnit_Framework_MockObject_MockObject $user */ /** @var IUser|\PHPUnit_Framework_MockObject_MockObject $user */
$user = $this->getMockBuilder('\OCP\IUser')->getMock(); $user = $this->createMock(IUser::class);
$user->expects($this->any()) $user->expects($this->any())
->method('getUID') ->method('getUID')
->will($this->returnValue('john')); ->will($this->returnValue('john'));
@ -601,7 +600,7 @@ class LoginControllerTest extends TestCase {
->with('192.168.0.1') ->with('192.168.0.1')
->willReturn(200); ->willReturn(200);
$this->userManager->expects($this->once()) $this->userManager->expects($this->once())
->method('checkPassword') ->method('checkPasswordNoLogging')
->will($this->returnValue($user)); ->will($this->returnValue($user));
$this->userSession->expects($this->once()) $this->userSession->expects($this->once())
->method('login') ->method('login')
@ -640,8 +639,8 @@ class LoginControllerTest extends TestCase {
} }
public function testLoginWithMultpleTwoFactorProviders() { public function testLoginWithMultpleTwoFactorProviders() {
/** @var IUser | \PHPUnit_Framework_MockObject_MockObject $user */ /** @var IUser|\PHPUnit_Framework_MockObject_MockObject $user */
$user = $this->getMockBuilder('\OCP\IUser')->getMock(); $user = $this->createMock(IUser::class);
$user->expects($this->any()) $user->expects($this->any())
->method('getUID') ->method('getUID')
->will($this->returnValue('john')); ->will($this->returnValue('john'));
@ -668,7 +667,7 @@ class LoginControllerTest extends TestCase {
->with('192.168.0.1') ->with('192.168.0.1')
->willReturn(200); ->willReturn(200);
$this->userManager->expects($this->once()) $this->userManager->expects($this->once())
->method('checkPassword') ->method('checkPasswordNoLogging')
->will($this->returnValue($user)); ->will($this->returnValue($user));
$this->userSession->expects($this->once()) $this->userSession->expects($this->once())
->method('login') ->method('login')
@ -706,18 +705,19 @@ class LoginControllerTest extends TestCase {
} }
public function testToNotLeakLoginName() { public function testToNotLeakLoginName() {
/** @var IUser | \PHPUnit_Framework_MockObject_MockObject $user */ /** @var IUser|\PHPUnit_Framework_MockObject_MockObject $user */
$user = $this->getMockBuilder('\OCP\IUser')->getMock(); $user = $this->createMock(IUser::class);
$user->expects($this->any()) $user->expects($this->any())
->method('getUID') ->method('getUID')
->will($this->returnValue('john')); ->will($this->returnValue('john'));
$this->userManager->expects($this->exactly(2)) $this->userManager->expects($this->once())
->method('checkPasswordNoLogging')
->with('john@doe.com', 'just wrong')
->willReturn(false);
$this->userManager->expects($this->once())
->method('checkPassword') ->method('checkPassword')
->withConsecutive( ->with('john', 'just wrong')
['john@doe.com', 'just wrong'],
['john', 'just wrong']
)
->willReturn(false); ->willReturn(false);
$this->userManager->expects($this->once()) $this->userManager->expects($this->once())