From a9d0ddbf5aaad637872fbcfd2931c05fc225adc5 Mon Sep 17 00:00:00 2001 From: takezoe Date: Sun, 30 Jun 2013 02:14:56 +0900 Subject: [PATCH] Fix basic authentication to encrypt entered password. --- src/main/scala/servlet/BasicAuthenticationFilter.scala | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/main/scala/servlet/BasicAuthenticationFilter.scala b/src/main/scala/servlet/BasicAuthenticationFilter.scala index 1a0908e97..a15bfdc70 100644 --- a/src/main/scala/servlet/BasicAuthenticationFilter.scala +++ b/src/main/scala/servlet/BasicAuthenticationFilter.scala @@ -2,6 +2,7 @@ package servlet import javax.servlet._ import javax.servlet.http._ +import util.StringUtil._ import service.{AccountService, RepositoryService} import org.slf4j.LoggerFactory @@ -54,7 +55,7 @@ class BasicAuthenticationFilter extends Filter with RepositoryService with Accou private def isWritableUser(username: String, password: String, repository: RepositoryService.RepositoryInfo): Boolean = { getAccountByUserName(username) match { - case Some(account) if(account.password == password) => { + case Some(account) if(account.password == encrypt(password)) => { (account.isAdmin // administrator || account.userName == repository.owner // repository owner || getCollaborators(repository.owner, repository.name).contains(account.userName)) // collaborator