sigoden/dufs
1
0
Fork 0
mirror of https://github.com/sigoden/dufs.git synced 2026-04-09 00:59:02 +03:00
Code Issues 8 Packages Projects Releases 10 Wiki Activity

fix: verify token length (#627)

Browse Source
This commit is contained in:
sigoden
2025-09-02 18:48:17 +08:00
committed by GitHub
parent 4016715187
commit db75ba4357
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/auth.rs
View File

@@ -173,6 +173,10 @@ impl AccessControl {
fn verify_token<'a>(&'a self, token: &str, path: &str) -> Result<(String, &'a AccessPaths)> { fn verify_token<'a>(&'a self, token: &str, path: &str) -> Result<(String, &'a AccessPaths)> {
let raw = hex::decode(token)?; let raw = hex::decode(token)?;
if raw.len() < 72 {
bail!("Invalid token");
}
let sig_bytes = &raw[..64]; let sig_bytes = &raw[..64];
let exp_bytes = &raw[64..72]; let exp_bytes = &raw[64..72];
let user_bytes = &raw[72..]; let user_bytes = &raw[72..];