fix pam authorization (#19040)

https://huntr.dev/bounties/8d221f92-b2b1-4878-bc31-66ff272e5ceb/ Co-authored-by: ysf <[email protected]>
go-gitea · Mar 10, 2022 · 1314f38 · 1314f38
1 parent 7443213
commit 1314f38
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/modules/auth/pam/pam.go b/modules/auth/pam/pam.go
@@ -34,6 +34,10 @@ func Auth(serviceName, userName, passwd string) (string, error) {
 	if err = t.Authenticate(0); err != nil {
 		return "", err
 	}
+
+	if err = t.AcctMgmt(0); err != nil {
+	  return "", err
+  }
 
 	// PAM login names might suffer transformations in the PAM stack.
 	// We should take whatever the PAM stack returns for it.