kenmirrors/grocy
1
0
Fork 0
mirror of https://github.com/grocy/grocy.git synced 2026-06-09 03:35:05 +00:00
Code Issues Projects Releases Wiki Activity

Check for empty usernames in ReverseProxyAuthMiddleware (references #2843)

Browse Source
This commit is contained in:
Bernd Bestel
2026-01-13 21:02:30 +01:00
parent bf96ff5b92
commit 2a124a3d47
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
middleware/ReverseProxyAuthMiddleware.php
View File

@@ -40,7 +40,7 @@ class ReverseProxyAuthMiddleware extends AuthMiddleware
else
{
$username = $request->getHeader(GROCY_REVERSE_PROXY_AUTH_HEADER);
if (count($username) !== 1)
if (count($username) !== 1 || (count($username) === 1 && strlen($username[0]) === 0))
{
// Invalid configuration of Proxy
throw new \Exception('ReverseProxyAuthMiddleware: ' . GROCY_REVERSE_PROXY_AUTH_HEADER . ' header is missing or invalid');