Classic298 b78dabb442 fix: reject empty passwords in LDAP authentication to prevent unauthenticated binds (#23633) ...

Per RFC 4513, a Simple Bind with a non-empty DN but empty password is unauthenticated simple authentication. Many LDAP servers (OpenLDAP default, some AD configs) accept these binds, allowing account takeover without valid credentials.

Rejects empty and whitespace-only passwords before attempting the LDAP bind.

2026-04-12 16:33:57 -05:00

..

analytics.py

refac: async db

2026-04-12 14:22:11 -05:00

audio.py

refac: async db

2026-04-12 14:22:11 -05:00

auths.py

fix: reject empty passwords in LDAP authentication to prevent unauthenticated binds (#23633)

2026-04-12 16:33:57 -05:00

automations.py

refac: async db

2026-04-12 14:22:11 -05:00

channels.py

fix: enforce filter_allowed_access_grants on channel create and update (#23638)

2026-04-12 16:27:44 -05:00

chats.py

refac: async db

2026-04-12 14:22:11 -05:00

configs.py

refac

2026-03-26 18:17:49 -05:00

evaluations.py

refac: async db

2026-04-12 14:22:11 -05:00

files.py

refac

2026-04-12 14:39:23 -05:00

folders.py

refac: async db

2026-04-12 14:22:11 -05:00

functions.py

refac: async db

2026-04-12 14:22:11 -05:00

groups.py

refac: async db

2026-04-12 14:22:11 -05:00

images.py

refac

2026-04-12 14:39:23 -05:00

knowledge.py

refac

2026-04-12 14:39:23 -05:00

memories.py

refac: async db

2026-04-12 14:22:11 -05:00

models.py

refac: async db

2026-04-12 14:22:11 -05:00

notes.py

refac: async db

2026-04-12 14:22:11 -05:00

ollama.py

refac: async db

2026-04-12 14:22:11 -05:00

openai.py

fix: gate OpenAI catch-all proxy behind ENABLE_OPENAI_API_PASSTHROUGH toggle (#23640)

2026-04-12 14:26:12 -05:00

pipelines.py

refac

2026-03-24 04:49:48 -05:00

prompts.py

refac: async db

2026-04-12 14:22:11 -05:00

retrieval.py

refac: async db

2026-04-12 14:22:11 -05:00

scim.py

refac: async db

2026-04-12 14:22:11 -05:00

skills.py

refac: async db

2026-04-12 14:22:11 -05:00

tasks.py

refac

2026-03-17 17:58:01 -05:00

terminals.py

refac: async db

2026-04-12 14:22:11 -05:00

tools.py

refac

2026-04-12 14:24:08 -05:00

users.py

fix: invalidate stale Socket.IO sessions on role change and user deletion (#23642)

2026-04-12 16:19:38 -05:00

utils.py

refac

2026-03-26 19:01:33 -05:00