B #5049: Unable to web login when quotes in passwd (#174)

Signed-off-by: Ricardo Diaz <rdiaz@opennebula.io> (cherry picked from commit 2d31aca)
OpenNebula · Oct 6, 2020 · 0b3ac16 · 0b3ac16
1 parent 7b3dd89
commit 0b3ac16
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/cloud/common/CloudAuth/OpenNebulaCloudAuth.rb b/src/cloud/common/CloudAuth/OpenNebulaCloudAuth.rb
@@ -83,7 +83,8 @@ def do_auth(env, params={})
 
             # Check if the user authenticated with a scoped token. In this case
             # encode the EGID in the username as "user:egid"
-            egid = user["//LOGIN_TOKEN [ TOKEN = \"#{password}\" ]/EGID"]
+            egid = nil
+            egid = user["//LOGIN_TOKEN [ TOKEN = \"#{password}\" ]/EGID"] if password.match(/^[a-z0-9]+$/)
 
             auth_name = user.name
             auth_name = "#{auth_name}:#{egid}" if egid