Merge pull request #2007 from Murena-SAS/dev/fix-autologin

Fix(auth): Correct OIDC login by using SensitiveString object.
This commit is contained in:
Maarten 2026-10-22 13:18:56 +02:00 • committed by GitHub
commit b9397e6e20
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -176,7 +176,8 @@ class SnappyMailHelper
// If OpenID Connect (OIDC) is enabled and used for login, use this.
if (static::isOIDCLogin()) {
$sEmail = $config->getUserValue($sUID, 'settings', 'email');
return [$sUID, $sEmail, "oidc_login|{$sUID}"];
$pwd = new \SnappyMail\SensitiveString("oidc_login|{$sUID}");
return [$sUID, $sEmail, $pwd];
}
// Only use the user's password in the current session if they have