Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[stable25] Fix login loop if login CSRF fails and user is not logged in #36208

Merged
merged 1 commit into from
Jan 18, 2023
Merged

[stable25] Fix login loop if login CSRF fails and user is not logged in #36208

merged 1 commit into from
Jan 18, 2023

Commits on Jan 18, 2023

  1. Fix login loop if login CSRF fails and user is not logged in 

    If CSRF fails but the user is logged in that they probably logged in in
another tab. This is fine. We can just redirect.
If CSRF fails and the user is also not logged in then something is
fishy. E.g. because Nextcloud contantly regenrates the session and the
CSRF token and the user is stuck in an endless login loop.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
    @ChristophWurst @backportbot-nextcloud
    ChristophWurst authored and backportbot-nextcloud[bot] committed Jan 18, 2023
    Configuration menu
    Copy the full SHA
    197a2ea View commit details
    Browse the repository at this point in the history