gogrlx/nats-server
1
0
Fork 0
mirror of https://github.com/gogrlx/nats-server.git synced 2026-04-02 03:38:42 -07:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1429 from kingkorf/master

Browse Source 
First check bcrypt '$' prefix before performing rexeg on password
This commit is contained in:
Derek Collison
2020-05-28 14:18:03 -07:00
committed by GitHub
parent 4ca05d9719 c1848a997c
commit f6a9d3bc3c
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
server/auth.go
View File

@@ -741,7 +741,11 @@ var validBcryptPrefix = regexp.MustCompile(`^\$2[a,b,x,y]{1}\$\d{2}\$.*`)
// isBcrypt checks whether the given password or token is bcrypted.
func isBcrypt(password string) bool {
return validBcryptPrefix.MatchString(password)
if strings.HasPrefix(password, "$") {
return validBcryptPrefix.MatchString(password)
}
return false
}
func comparePasswords(serverPassword, clientPassword string) bool {