fix: disallow usage of default password (#3284)

2025-07-30 21:30:14 +02:00 · 2023-03-06 20:43:44 +01:00
parent f0e5ef0fc5
commit a01c1f6ab0
3 changed files with 10 additions and 3 deletions
--- a/lib/AuthenticationMiddleware.php
+++ b/lib/AuthenticationMiddleware.php
@@ -14,6 +14,13 @@

 final class AuthenticationMiddleware
 {
+    public function __construct()
+    {
+        if (Configuration::getConfig('authentication', 'password') === '') {
+            throw new \Exception('The authentication password cannot be the empty string');
+        }
+    }
+
    public function __invoke(): void
    {
        $user = $_SERVER['PHP_AUTH_USER'] ?? null;