From 2c54ac9be3873f7b087d3c459114ecd73dab2518 Mon Sep 17 00:00:00 2001 From: Avinash Gusain Date: Wed, 12 Nov 2025 14:41:47 +0530 Subject: [PATCH] Fix(auth): Correct OIDC login by using SensitiveString object. --- .../nextcloud/snappymail/lib/Util/SnappyMailHelper.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/integrations/nextcloud/snappymail/lib/Util/SnappyMailHelper.php b/integrations/nextcloud/snappymail/lib/Util/SnappyMailHelper.php index 80a93d061..deb7fb465 100644 --- a/integrations/nextcloud/snappymail/lib/Util/SnappyMailHelper.php +++ b/integrations/nextcloud/snappymail/lib/Util/SnappyMailHelper.php @@ -176,7 +176,8 @@ class SnappyMailHelper // If OpenID Connect (OIDC) is enabled and used for login, use this. if (static::isOIDCLogin()) { $sEmail = $config->getUserValue($sUID, 'settings', 'email'); - return [$sUID, $sEmail, "oidc_login|{$sUID}"]; + $pwd = new \SnappyMail\SensitiveString("oidc_login|{$sUID}"); + return [$sUID, $sEmail, $pwd]; } // Only use the user's password in the current session if they have