add login validation to LdapAuthenticationProvider

nkonev · Sep 19, 2024 · ea3e7cc · ea3e7cc
1 parent 8fdedff
commit ea3e7cc
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/aaa/src/main/java/name/nkonev/aaa/security/LdapAuthenticationProvider.java b/aaa/src/main/java/name/nkonev/aaa/security/LdapAuthenticationProvider.java
@@ -30,6 +30,7 @@
 import java.util.Set;
 import java.util.concurrent.atomic.AtomicBoolean;
 
+import static name.nkonev.aaa.converter.UserAccountConverter.validateLengthAndTrimLogin;
 import static name.nkonev.aaa.utils.TimeUtil.getNowUTC;
 
 // https://spring.io/guides/gs/authenticating-ldap
@@ -66,7 +67,7 @@ public class LdapAuthenticationProvider implements AuthenticationProvider, Confl
     public Authentication authenticate(Authentication authentication) throws AuthenticationException {
         if (aaaProperties.ldap().auth().enabled()) {
             UsernamePasswordAuthenticationToken usernamePasswordAuthenticationToken = (UsernamePasswordAuthenticationToken) authentication;
-            var userName = usernamePasswordAuthenticationToken.getPrincipal().toString();
+            var userName = validateLengthAndTrimLogin(usernamePasswordAuthenticationToken.getPrincipal().toString(), false);
             var password = usernamePasswordAuthenticationToken.getCredentials().toString();
 
             var encodedPassword = encodePassword(password);