Fix duplicate users due to config keys not supporting upper and lower…

… case
TFyre · Oct 9, 2024 · cd00513 · cd00513
1 parent d5735a2
commit cd00513
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/bambu/src/main/java/com/tfyre/servlet/TFyreIdentityProvider.java b/bambu/src/main/java/com/tfyre/servlet/TFyreIdentityProvider.java
@@ -17,8 +17,10 @@
 import java.security.Security;
 import java.security.spec.InvalidKeySpecException;
 import java.util.HashMap;
+import java.util.HashSet;
 import java.util.Map;
 import java.util.Optional;
+import java.util.Set;
 import java.util.stream.Collectors;
 import org.wildfly.security.credential.PasswordCredential;
 import org.wildfly.security.evidence.PasswordGuessEvidence;
@@ -44,8 +46,10 @@ public void postConstruct() {
             map.put(userPass, new User(BcryptUtil.bcryptHash(userPass), SystemRoles.ROLE_ADMIN));
             return;
         }
+        final  Set<String> seen = new HashSet<>();
         map.putAll(config.users().entrySet()
                 .stream()
+                .filter(e -> seen.add(e.getKey().toLowerCase()))
                 .collect(Collectors.toMap(e -> e.getKey().toLowerCase(), e -> {
                     String password = e.getValue().password();
                     if (ModularCrypt.identifyAlgorithm(password.toCharArray()) == null) {