haiwen/seafile-server
1
0
Fork 0
mirror of https://github.com/haiwen/seafile-server.git synced 2025-09-09 03:08:57 +00:00
Code Issues Releases Wiki Activity

Validate token return 403 for go (#523)

Browse Source
This commit is contained in:
feiniks
2021-12-02 18:30:22 +08:00
committed by GitHub
parent 273e44c18e
commit 96884a83a0
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
fileserver/sync_api.go
View File

@@ -1034,7 +1034,11 @@ func validateToken(r *http.Request, repoID string, skipCache bool) (string, *app
} }
if value, ok := tokenCache.Load(token); ok { if value, ok := tokenCache.Load(token); ok {
if info, ok := value.(*tokenInfo); ok && info.repoID == repoID { if info, ok := value.(*tokenInfo); ok {
if info.repoID != repoID {
msg := "Invalid token"
return "", &appError{nil, msg, http.StatusForbidden}
}
return info.email, nil return info.email, nil
} }
} }