libre.sh/keycloak-scim
4
0
Fork 0
Code Issues 15 Pull requests Releases 1 Activity Actions

fix: check for blank password / client secret

Browse source 
closes: #30540

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
This commit is contained in:
Steve Hawkins 2024-07-09 15:57:15 -04:00 committed by Peter Zaoral
parent 9247029ca3
commit d5041816b6
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
quarkus/runtime/src/main/java/org/keycloak/quarkus/runtime/cli/command/BootstrapAdminService.java
View file

@ -78,6 +78,9 @@ public class BootstrapAdminService extends AbstractNonServerCommand {
if (!clientSecret.equals(confirmClientSecret)) { if (!clientSecret.equals(confirmClientSecret)) {
throw new PropertyException("Client secrets do not match"); throw new PropertyException("Client secrets do not match");
} }
if (clientSecret.isBlank()) {
throw new PropertyException("Client secret must not be blank");
}
} else { } else {
clientSecret = getFromEnv(clientSecretEnv); clientSecret = getFromEnv(clientSecretEnv);
} }

3
quarkus/runtime/src/main/java/org/keycloak/quarkus/runtime/cli/command/BootstrapAdminUser.java
View file

@ -78,6 +78,9 @@ public class BootstrapAdminUser extends AbstractNonServerCommand {
if (!password.equals(confirmPassword)) { if (!password.equals(confirmPassword)) {
throw new PropertyException("Passwords do not match"); throw new PropertyException("Passwords do not match");
} }
if (password.isBlank()) {
throw new PropertyException("Password must not be blank");
}
} else { } else {
password = getFromEnv(passwordEnv); password = getFromEnv(passwordEnv);
} }