3pp-mirror/penpot
1
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2025-06-07 07:51:38 +02:00
Code Issues Projects Releases Packages Wiki Activity

🐛 Fix issues with not authenticated requests

Browse source 
Related to concurrency model refactor.
This commit is contained in:
Andrey Antukh 2022-02-23 12:34:08 +01:00
parent 340ee859f9
commit 31b13f3551
2 changed files with 10 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

18
backend/src/app/rpc.clj
View file

@ -114,10 +114,7 @@
(if (= :none dname)
(with-meta
(fn [cfg params]
(try
(p/wrap (f cfg params))
(catch Throwable cause
(p/rejected cause))))
(p/do! (f cfg params)))
mdata)
(let [executor (get executors dname)]
@ -173,13 +170,14 @@
(fn [{:keys [::request] :as params}]
;; Raise authentication error when rpc method requires auth but
;; no profile-id is found in the request.
(when (and auth? (not (uuid? (:profile-id params))))
(ex/raise :type :authentication
:code :authentication-required
:hint "authentication required for this endpoint"))
(p/do!
(if (and auth? (not (uuid? (:profile-id params))))
(ex/raise :type :authentication
:code :authentication-required
:hint "authentication required for this endpoint")
(let [params (us/conform spec (dissoc params ::request))]
(f cfg (assoc params ::request request))))))
(let [params (us/conform spec (dissoc params ::request))]
(f cfg (assoc params ::request request))))
mdata)))
(defn- process-method