v0.03 2008-03-31 Mike Peachey * html/Callbacks/ExternalAuth/autohandler/Auth Bug found on lines 94-100. The ELSE block starting on line 95 was assigned to the IF starting on 85 instead of the IF block starting on line 86. This meant that if the user entered at the login screen exists no password would be checked. It was doing this: If session has current user who has an ID If password has already been validated SUCCESS Else Return to autohandler with valid session & implicit auth Else delete session This has now been corrected to this: If session has current user who has an ID If password has already been validated SUCCESS Else Delete session Else return to autohandler with whatever we had before the block * /lib/RT/Authen/ExternalAuth.pm Version updated to 0.03 v0.02 2008-03-17 Mike Peachey * lib/RT/User_Vendor.pm Bug #1 found on line 446. CanonicalizeUserInfo was being called directly, instead of being called on the $self user object. This was causing CanonicalizeUserInfo to shift the e-mail address it was passed into the $self var instead of the $email var. It was therefore returning a blank e-mail address regardless of the input. * lib/RT/User_Vendor.pm Header comments altered to reflect that the file is part of the RT::Authen::ExternalAuth extension. * /lib/RT/Authen/ExternalAuth.pm Version updated to 0.02 v0.01 2008-03-13 Mike Peachey * Initial Release