enh(auth): autologin enhancement (#11957)

Refs: MON-15384
centreon · Oct 7, 2022 · fa76286 · fa76286
1 parent a487b58
commit fa76286
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/www/class/centreonAuth.class.php b/www/class/centreonAuth.class.php
@@ -231,6 +231,14 @@ protected function checkPassword($password, $token = "", $autoImport = false)
             || $this->userInfos["contact_auth_type"] == "local"
             || $this->autologin
         ) {
+            if (
+                array_key_exists('contact_oreon', $this->userInfos)
+                && $this->userInfos['contact_oreon'] !== '1'
+            ) {
+                $this->passwdOk = 0;
+                return;
+            }
+
             if ($this->autologin
                 && $this->userInfos["contact_autologin_key"]
                 && $this->userInfos["contact_autologin_key"] === $token