From 437f3c238aca6fd625f77ab5ed5e31bb28ede581 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Josu=C3=A9=20Tille?= <josue@tille.ch>
Date: Thu, 17 Jan 2019 22:54:25 +0100
Subject: [PATCH] Fix when the user stay connected

---
 helpers.lua | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/helpers.lua b/helpers.lua
index ed5ed74..b20d62f 100644
--- a/helpers.lua
+++ b/helpers.lua
@@ -355,6 +355,15 @@ function set_headers(user)
             conf["ldap_identifier"].."=".. user ..","..conf["ldap_group"],
             cache:get(user.."-password")
         )
+        -- If the ldap connection fail (because the password was changed).
+        -- Logout the user and invalid the password
+        if not ldap then
+            ngx.log(ngx.NOTICE, "LDAP connection failled. Disconnect user : ".. user)
+            cache:delete(authUser.."-password")
+            flash("info", t("please_login"))
+            local back_url = ngx.var.scheme .. "://" .. ngx.var.host .. ngx.var.uri .. uri_args_string()
+            return redirect(conf.portal_url.."?r="..ngx.encode_base64(back_url))
+        end
         ngx.log(ngx.NOTICE, "Reloading LDAP values for: "..user)
         for dn, attribs in ldap:search {
             base = conf["ldap_identifier"].."=".. user ..","..conf["ldap_group"],