vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Ensure encrypted passwords are not enabled with OIDC auth

Browse source 
Fixes https://jira.prod.coreos.systems/browse/QS-49
This commit is contained in:
Joseph Schorr 2017-10-31 16:03:28 -04:00
parent f9dc4e79b3
commit 74f99ba94a
2 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
util/config/validators/validate_oidcauth.py
View file

@ -10,6 +10,10 @@ class OIDCAuthValidator(BaseValidator):
if config.get('AUTHENTICATION_TYPE', 'Database') != 'OIDC':
return
# Ensure that encrypted passwords are not required, as they do not work with OIDC auth.
if config.get('FEATURE_REQUIRE_ENCRYPTED_BASIC_AUTH', False):
raise ConfigValidationException('Encrypted passwords must be disabled to use OIDC auth')
login_service_id = config.get('INTERNAL_OIDC_SERVICE_ID')
if not login_service_id:
raise ConfigValidationException('Missing OIDC provider')