[NETBEANS-3242] Security flaw in pluginportal's google sign on

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0
• Fix Version/s: 3.0
• Component/s: updatecenters - Pluginportal
• Assignee: Jan Pirek
• Reporter: Jan Pirek
• Created: 16/Oct/19 09:22
• Updated: 18/Oct/19 18:00
• Resolved: 18/Oct/19 07:57

Description

Login process should work with google auth token  and backend controller should verify and extract user from token insteas of passed value from client js part of the login which can be altered.