Просмотр исходного кода

fix(ldap-sso): do not log error level when invalid user credentials

Zaiming (Stone) Shi 2 лет назад
Родитель
Сommit
b28e781c50

+ 3 - 1
apps/emqx_dashboard_sso/src/emqx_dashboard_sso_ldap.erl

@@ -131,8 +131,10 @@ login(
                     {bind, Entry#eldap_entry.object_name, Sign}
                 )
             of
-                ok ->
+                {ok, #{result := ok}} ->
                     ensure_user_exists(Username);
+                {ok, #{result := invalidCredentials} = Reason} ->
+                    {error, Reason};
                 {error, _} = Error ->
                     Error
             end;

+ 1 - 1
apps/emqx_ldap/src/emqx_ldap.erl

@@ -249,7 +249,7 @@ do_ldap_query(
     #{pool_name := PoolName} = State
 ) ->
     LogMeta = #{connector => InstId, search => SearchOptions, state => emqx_utils:redact(State)},
-    ?TRACE("QUERY", "ldap_connector_received", LogMeta),
+    ?TRACE("QUERY", "ldap_connector_received_query", LogMeta),
     case
         ecpool:pick_and_do(
             PoolName,

+ 3 - 1
apps/emqx_ldap/src/emqx_ldap_bind_worker.erl

@@ -80,7 +80,9 @@ on_query(
                 ldap_connector_query_return,
                 #{result => ok}
             ),
-            ok;
+            {ok, #{result => ok}};
+        {error, invalidCredentials} ->
+            {ok, #{result => invalidCredentials}};
         {error, Reason} ->
             ?SLOG(
                 error,