Catch missing Certainty bundle exception when checking for exposed password in Model\User

This commit is contained in:
Hypolite Petovan 2019-10-12 21:06:47 -04:00
parent 1cdbf32aa2
commit db0630b0f9
1 changed files with 14 additions and 2 deletions

View File

@ -412,6 +412,7 @@ class User
* *
* @param string $password * @param string $password
* @return bool * @return bool
* @throws Exception
*/ */
public static function isPasswordExposed($password) public static function isPasswordExposed($password)
{ {
@ -420,9 +421,20 @@ class User
'cacheDirectory' => get_temppath() . '/password-exposed-cache/', 'cacheDirectory' => get_temppath() . '/password-exposed-cache/',
]); ]);
$PasswordExposedCHecker = new PasswordExposed\PasswordExposedChecker(null, $cache); try {
$passwordExposedChecker = new PasswordExposed\PasswordExposedChecker(null, $cache);
return $PasswordExposedCHecker->passwordExposed($password) === PasswordExposed\PasswordStatus::EXPOSED; return $passwordExposedChecker->passwordExposed($password) === PasswordExposed\PasswordStatus::EXPOSED;
} catch (\Exception $e) {
Logger::error('Password Exposed Exception: ' . $e->getMessage(), [
'code' => $e->getCode(),
'file' => $e->getFile(),
'line' => $e->getLine(),
'trace' => $e->getTraceAsString()
]);
return false;
}
} }
/** /**