From 732bdbde4bbedbeca3f26306251576d99632479f Mon Sep 17 00:00:00 2001
From: Jordi Boggiano <j.boggiano@seld.be>
Date: Thu, 28 Apr 2022 21:21:20 +0200
Subject: [PATCH] Fix missing validation of local auth file before loading it

---
 src/Composer/Factory.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/Composer/Factory.php b/src/Composer/Factory.php
index d84d9ee88..7b575f76c 100644
--- a/src/Composer/Factory.php
+++ b/src/Composer/Factory.php
@@ -331,6 +331,7 @@ class Factory
             $localAuthFile = new JsonFile(dirname(realpath($composerFile)) . '/auth.json', null, $io);
             if ($localAuthFile->exists()) {
                 $io->writeError('Loading config file ' . $localAuthFile->getPath(), true, IOInterface::DEBUG);
+                self::validateJsonSchema($io, $localAuthFile, JsonFile::AUTH_SCHEMA);
                 $config->merge(array('config' => $localAuthFile->read()), $localAuthFile->getPath());
                 $config->setAuthConfigSource(new JsonConfigSource($localAuthFile, true));
             }