CB-5710 anonymous access disabled active user fix

dbeaver · Oct 9, 2024 · 9ab0f12 · 9ab0f12
1 parent 1f1a9d2
commit 9ab0f12
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.../io.cloudbeaver.service.auth/src/io/cloudbeaver/service/auth/impl/WebServiceAuthImpl.java b/.../io.cloudbeaver.service.auth/src/io/cloudbeaver/service/auth/impl/WebServiceAuthImpl.java
@@ -21,6 +21,7 @@
 import io.cloudbeaver.auth.SMSignOutLinkProvider;
 import io.cloudbeaver.auth.provider.local.LocalAuthProvider;
 import io.cloudbeaver.model.WebPropertyInfo;
+import io.cloudbeaver.model.app.WebAppConfiguration;
 import io.cloudbeaver.model.session.WebAuthInfo;
 import io.cloudbeaver.model.session.WebSession;
 import io.cloudbeaver.model.session.WebSessionAuthProcessor;
@@ -189,9 +190,13 @@ public WebLogoutInfo authLogout(
     @Override
     public WebUserInfo activeUser(@NotNull WebSession webSession) throws DBWebException {
         if (webSession.getUser() == null) {
+            WebAppConfiguration appConfiguration = webSession.getApplication().getAppConfiguration();
+            if (!appConfiguration.isAnonymousAccessEnabled()) {
+                return null;
+            }
             SMUser anonymous = new SMUser("anonymous", true, null);
             anonymous.setUserTeams(
-                new String[]{webSession.getApplication().getAppConfiguration().getAnonymousUserTeam()}
+                new String[]{appConfiguration.getAnonymousUserTeam()}
             );
             return new WebUserInfo(webSession, new WebUser(anonymous));
         }