Don't leak plain text password in kcContext

This commit is contained in:
Oliver Traber 2023-10-29 13:57:22 +01:00
parent 10cfff043b
commit 0a562763e6
Signed by: Bluemedia
GPG key ID: C0674B105057136C

View file

@ -92,9 +92,12 @@ SOFTWARE.
key == "identityProviderBrokerCtx" && key == "identityProviderBrokerCtx" &&
are_same_path(path, []) && are_same_path(path, []) &&
["login-idp-link-confirm.ftl", "login-idp-link-email.ftl" ]?seq_contains(pageId) ["login-idp-link-confirm.ftl", "login-idp-link-email.ftl" ]?seq_contains(pageId)
) || ( ) || (
["masterAdminClient", "delegateForUpdate", "defaultRole"]?seq_contains(key) && ["masterAdminClient", "delegateForUpdate", "defaultRole"]?seq_contains(key) &&
are_same_path(path, ["realm"]) are_same_path(path, ["realm"])
) || (
["password"]?seq_contains(key) &&
are_same_path(path, ["login"])
) )
> >
<#continue> <#continue>