lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Comment

Browse Source
This commit is contained in:
Laurent Destailleur 2023-04-13 23:21:05 +02:00
parent 30542b58e1
commit e99d25cf87
3 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
htdocs/core/lib/security.lib.php
View File

@ -109,6 +109,7 @@ function dolGetRandomBytes($length)
/** /**
* Encode a string with a symetric encryption. Used to encrypt sensitive data into database. * Encode a string with a symetric encryption. Used to encrypt sensitive data into database.
* Note: If a backup is restored onto another instance with a different $dolibarr_main_instance_unique_id, then decoded value will differ. * Note: If a backup is restored onto another instance with a different $dolibarr_main_instance_unique_id, then decoded value will differ.
* This function is called for example by dol_set_const() when saving a sensible data into database configuration table llx_const.
* *
* @param string $chain string to encode * @param string $chain string to encode
* @param string $key If '', we use $dolibarr_main_instance_unique_id * @param string $key If '', we use $dolibarr_main_instance_unique_id

3
htdocs/core/login/functions_openid.php
View File

@ -20,6 +20,9 @@
* \file htdocs/core/login/functions_openid.php * \file htdocs/core/login/functions_openid.php
* \ingroup core * \ingroup core
* \brief Authentication functions for OpenId mode * \brief Authentication functions for OpenId mode
*
* This authentication method is based on "OpenID v2" and is deprecated.
* Use instead the method "OpenID Connect".
*/ */
include_once DOL_DOCUMENT_ROOT.'/core/class/openid.class.php'; include_once DOL_DOCUMENT_ROOT.'/core/class/openid.class.php';

1
htdocs/core/login/functions_openid_connect.php
View File

@ -96,6 +96,7 @@ function check_user_password_openid_connect($usertotest, $passwordtotest, $entit
if ($resql) { if ($resql) {
$obj = $db->fetch_object($resql); $obj = $db->fetch_object($resql);
if ($obj) { if ($obj) {
// TODO I think we can remove this because this is done now natively by core after calling check_user_password_openid_connect()
$now = dol_now(); $now = dol_now();
if ($obj->datestartvalidity && $db->jdate($obj->datestartvalidity) > $now) { if ($obj->datestartvalidity && $db->jdate($obj->datestartvalidity) > $now) {
// Load translation files required by the page // Load translation files required by the page