noth/surrealpatch
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Don’t allow WebSocket RPC authenticate method to be called with no token value

Browse source
This commit is contained in:
Tobie Morgan Hitchcock 2022-10-25 06:24:47 -07:00
parent d2e7a8532d
commit 926356d23b
1 changed files with 0 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/net/rpc.rs
View file

@ -208,7 +208,6 @@ impl Rpc {
_ => return res::failure(id, Failure::INVALID_PARAMS).send(out, chn).await, _ => return res::failure(id, Failure::INVALID_PARAMS).send(out, chn).await,
}, },
"authenticate" => match params.take_one() { "authenticate" => match params.take_one() {
Value::None => rpc.write().await.invalidate().await,
Value::Strand(v) => rpc.write().await.authenticate(v).await, Value::Strand(v) => rpc.write().await.authenticate(v).await,
// Authenticate using an authentication token // Authenticate using an authentication token
_ => return res::failure(id, Failure::INVALID_PARAMS).send(out, chn).await, _ => return res::failure(id, Failure::INVALID_PARAMS).send(out, chn).await,