mirror of
https://gerrit.wikimedia.org/r/mediawiki/extensions/OATHAuth
synced 2024-09-24 10:49:57 +00:00
Merge "Trim surrounding whitespace and seperators from tokens"
This commit is contained in:
commit
1fc19d6cc4
|
@ -98,6 +98,11 @@ class OATHAuthKey {
|
||||||
Base32::decode( $this->secret['secret'] ),
|
Base32::decode( $this->secret['secret'] ),
|
||||||
$this->secret['period'], -$wgOATHAuthWindowRadius, $wgOATHAuthWindowRadius
|
$this->secret['period'], -$wgOATHAuthWindowRadius, $wgOATHAuthWindowRadius
|
||||||
);
|
);
|
||||||
|
|
||||||
|
// Remove any whitespace from the received token, which can be an intended group seperator
|
||||||
|
// or trimmeable whitespace
|
||||||
|
$token = preg_replace( '/\s+/', '', $token );
|
||||||
|
|
||||||
// Check to see if the user's given token is in the list of tokens generated
|
// Check to see if the user's given token is in the list of tokens generated
|
||||||
// for the time window.
|
// for the time window.
|
||||||
foreach ( $results as $window => $result ) {
|
foreach ( $results as $window => $result ) {
|
||||||
|
|
Loading…
Reference in a new issue