Only allow local login if password is non-empty (#5906)

This commit is contained in:
zeripath 2019-01-30 21:18:54 +00:00 committed by Lauris BH
parent 80098bd752
commit 0f295ababa
2 changed files with 2 additions and 2 deletions

View file

@ -644,7 +644,7 @@ func UserSignIn(username, password string) (*User, error) {
if hasUser {
switch user.LoginType {
case LoginNoType, LoginPlain, LoginOAuth2:
if user.ValidatePassword(password) {
if user.IsPasswordSet() && user.ValidatePassword(password) {
return user, nil
}