From 7e7d5a2ef2ff583854104c5a327619e3df6a1200 Mon Sep 17 00:00:00 2001 From: Christoph Wurst Date: Wed, 27 Apr 2016 10:50:17 +0200 Subject: [PATCH] Add fallback to allow user:token basic auth --- lib/private/User/Session.php | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/lib/private/User/Session.php b/lib/private/User/Session.php index 7fac36626e..bb35b65b27 100644 --- a/lib/private/User/Session.php +++ b/lib/private/User/Session.php @@ -282,6 +282,13 @@ class Session implements IUserSession, Emitter { $this->session->regenerateId(); $this->manager->emit('\OC\User', 'preLogin', array($uid, $password)); $user = $this->manager->checkPassword($uid, $password); + if ($user === false) { + // Password auth failed, maybe it's a token + $request = \OC::$server->getRequest(); + if ($this->validateToken($request, $password)) { + $user = $this->getUser(); + } + } if ($user !== false) { if (!is_null($user)) { if ($user->isEnabled()) {