apps/pg
1
0
Fork 0
mirror of https://github.com/sigcn/pg.git synced 2025-09-27 01:05:51 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

peermap/api: fix privilege escalation during token refresh

Browse Source
This commit is contained in:
rkonfj
2025-03-25 19:55:30 +08:00
parent 49236a9140
commit 6d8eba25ba
2 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
langs/ifelse.go Normal file
View File

@@ -0,0 +1,8 @@
package langs
func IfElse[T any](cond bool, v1, v2 T) T {
if cond {
return v1
}
return v2
}

2
peermap/api/api_v1.go
View File

@@ -59,7 +59,7 @@ func (a *ApiV1) ServeHTTP(w http.ResponseWriter, r *http.Request) {
} }
if time.Until(time.Unix(secret.Deadline, 0)) < if time.Until(time.Unix(secret.Deadline, 0)) <
a.Config.SecretValidityPeriod-a.Config.SecretRotationPeriod { a.Config.SecretValidityPeriod-a.Config.SecretRotationPeriod {
if newSecret, err := a.Grant(secret.Network, "PG_ADM"); err == nil { if newSecret, err := a.Grant(secret.Network, langs.IfElse(secret.Admin, "PG_ADM", "")); err == nil {
b, _ := json.Marshal(newSecret) b, _ := json.Marshal(newSecret)
w.Header().Add("X-Set-Token", string(b)) w.Header().Add("X-Set-Token", string(b))
} }