Return MethodNotAllowedException if Pw is not set

Don't accept pre-hashed (not-plaintext) passwords as the auth
provider no longer supports this due to sha1+salting the passwords
in the database.
pull/1244/head
Joshua Boniface 6 years ago
parent 250e0c75df
commit e790f024c2

@ -379,6 +379,11 @@ namespace MediaBrowser.Api
throw new ResourceNotFoundException("User not found");
}
if (!request.Pw)
{
throw new MethodNotAllowedException("Hashed-only passwords are not valid for this API.");
}
return Post(new AuthenticateUserByName
{
Username = user.Name,

Loading…
Cancel
Save