Skip to content

Reject attempts to bind usernames that contain spaces #118

@joestubbs

Description

@joestubbs

Typically, LDAP servers ignore spaces in usernames, and thus, attempting to bind with username "jstubbs" or username "jstubbs " and the correct password will succeed. However, this results in Tapis JWTs with different usernames, and thus, different subjects, causing many problems. We should update authenticator to reject usernames that contain spaces in the same way that we reject mixed-case usernames for a similar reason.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

Status

To Do

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions