mirrored/vaultwarden
1
0
Fork 1
Spiegel von https://github.com/dani-garcia/vaultwarden.git synchronisiert 2024-11-16 04:12:53 +01:00
Code Issues Releases Aktivität

make PublicToken support multi-domains

Quellcode durchsuchen
Dieser Commit ist enthalten in:
BlockListed 2023-09-09 14:31:38 +02:00
Ursprung 901bf570bf
Commit df524c7139
Es konnte kein GPG-Schlüssel zu dieser Signatur gefunden werden
GPG-Schlüssel-ID: 2D204777C477B588
1 geänderte Dateien mit 5 neuen und 3 gelöschten Zeilen
Statistiken anzeigen Patch-Datei herunterladen Diff-Datei herunterladen Alle Dateien ausklappen Alle Dateien einklappen

8
src/api/core/public.rs
Datei anzeigen

@ -217,11 +217,13 @@ impl<'r> FromRequest<'r> for PublicToken {
err_handler!("Token expired"); err_handler!("Token expired");
} }
// Check if claims.iss is host|claims.scope[0] // Check if claims.iss is host|claims.scope[0]
let host = match auth::Host::from_request(request).await { let host_info = match auth::HostInfo::from_request(request).await {
Outcome::Success(host) => host, Outcome::Success(host_info) => host_info,
_ => err_handler!("Error getting Host"), _ => err_handler!("Error getting Host"),
}; };
let complete_host = format!("{}|{}", host.host, claims.scope[0]); // TODO check if this is fine
// using origin, because that's what they're generated with in auth.rs
let complete_host = format!("{}|{}", host_info.origin, claims.scope[0]);
if complete_host != claims.iss { if complete_host != claims.iss {
err_handler!("Token not issued by this server"); err_handler!("Token not issued by this server");
} }