k-space/inventory-app
11
0
Fork 0
Code Issues 14 Pull Requests Packages Activity

Fix empty api key handling
All checks were successful
ci/woodpecker/manual/woodpecker Pipeline was successful
Details

Browse Source
This commit is contained in:
Madis Mägi 2023-08-02 01:37:19 +03:00
parent 3d7025ee4b
commit ff8f5eae36
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
inventory-app/api.py
View File

@ -15,6 +15,8 @@ def check_api_key(f):
@wraps(f) @wraps(f)
def decorated_function(*args, **kwargs): def decorated_function(*args, **kwargs):
request_key = request.headers.get('Authorization', False) request_key = request.headers.get('Authorization', False)
if not request_key:
return "nope", 403
found_key = re.search(r"Basic (.*)", request_key).group(1) found_key = re.search(r"Basic (.*)", request_key).group(1)
if not found_key or found_key != api_key: if not found_key or found_key != api_key:
return "nope", 403 return "nope", 403