Add sensitive data attribute

simplesamlphp · May 29, 2024 · 3a63cec · 3a63cec
1 parent f9cd3e5
commit 3a63cec
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 4 deletions.
diff --git a/src/Auth/Source/Hash.php b/src/Auth/Source/Hash.php
@@ -91,8 +91,11 @@ public function __construct(array $info, array $config)
      *
      * @throws \SimpleSAML\Error\Error if authentication fails.
      */
-    protected function login(string $username, string $password): array
-    {
+    protected function login(
+        string $username,
+        #[\SensitiveParameter]
+        string $password,
+    ): array {
         $cryptoUtils = new Utils\Crypto();
         foreach ($this->users as $userpass => $attrs) {
             $matches = explode(':', $userpass, 2);

diff --git a/src/Auth/Source/Htpasswd.php b/src/Auth/Source/Htpasswd.php
@@ -85,8 +85,11 @@ public function __construct(array $info, array $config)
      *
      * @throws \SimpleSAML\Error\Error if authentication fails.
      */
-    protected function login(string $username, string $password): array
-    {
+    protected function login(
+        string $username,
+        #[\SensitiveParameter]
+        string $password,
+    ): array {
         $cryptoUtils = new Utils\Crypto();
         foreach ($this->users as $userpass) {
             $matches = explode(':', $userpass, 2);