about summary refs log tree commit diff
path: root/app/models/concerns/ldap_authenticable.rb
diff options
context:
space:
mode:
authorClaire <claire.github-309c@sitedethib.com>2023-04-04 13:17:45 +0200
committerGitHub <noreply@github.com>2023-04-04 13:17:45 +0200
commitaa08a726545133a0af01fa51079724e9ae2134d5 (patch)
treef7161de7ddf0106416c539f858623ac4b972d374 /app/models/concerns/ldap_authenticable.rb
parentaf01ab7efebab356e73b498afe4258ae7515cc6a (diff)
parent69ca6316ec6b99b896e3ff62106bb4e9dbc9b6fa (diff)
Merge pull request #2161 from ClearlyClaire/glitch-soc/merge-upstream
Merge upstream changes
Diffstat (limited to 'app/models/concerns/ldap_authenticable.rb')
-rw-r--r--app/models/concerns/ldap_authenticable.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/app/models/concerns/ldap_authenticable.rb b/app/models/concerns/ldap_authenticable.rb
index dc5abcd5a..775df0817 100644
--- a/app/models/concerns/ldap_authenticable.rb
+++ b/app/models/concerns/ldap_authenticable.rb
@@ -6,7 +6,7 @@ module LdapAuthenticable
   class_methods do
     def authenticate_with_ldap(params = {})
       ldap   = Net::LDAP.new(ldap_options)
-      filter = format(Devise.ldap_search_filter, uid: Devise.ldap_uid, mail: Devise.ldap_mail, email: params[:email])
+      filter = format(Devise.ldap_search_filter, uid: Devise.ldap_uid, mail: Devise.ldap_mail, email: Net::LDAP::Filter.escape(params[:email]))
 
       if (user_info = ldap.bind_as(base: Devise.ldap_base, filter: filter, password: params[:password]))
         ldap_get_user(user_info.first)