GUACAMOLE-36: Do not automatically generate random passwords at the REST API level.

This commit is contained in:
Michael Jumper
2016-08-22 14:06:53 -07:00
parent 3744755a1e
commit 66f00adab0
2 changed files with 3 additions and 16 deletions

View File

@@ -206,10 +206,10 @@ public class ModeledUser extends ModeledDirectoryObject<UserModel> implements Us
// Store plaintext password internally
this.password = password;
// If no password provided, clear password salt and hash
// If no password provided, set random password
if (password == null) {
userModel.setPasswordSalt(null);
userModel.setPasswordHash(null);
userModel.setPasswordSalt(saltService.generateSalt());
userModel.setPasswordHash(saltService.generateSalt());
}
// Otherwise generate new salt and hash given password using newly-generated salt