Mirrors/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2025-12-06 22:30:56 +03:00
Code Issues Packages Projects Releases Wiki Activity

JWT: only accepts tokens from the expected header or cookie

Browse Source
This commit is contained in:
Nicola Murino
2021-02-02 13:11:47 +01:00
parent 4f609cfa30
commit f863530653
3 changed files with 74 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
httpd/server.go
View File

@@ -272,7 +272,7 @@ func (s *httpdServer) initializeRouter() {
router.Get(tokenPath, s.getToken)
router.Group(func(router chi.Router) {
router.Use(jwtauth.Verifier(s.tokenAuth))
router.Use(jwtauth.Verify(s.tokenAuth, jwtauth.TokenFromHeader))
router.Use(jwtAuthenticator)
router.Get(versionPath, func(w http.ResponseWriter, r *http.Request) {
@@ -336,7 +336,7 @@ func (s *httpdServer) initializeRouter() {
router.Post(webLoginPath, s.handleWebLoginPost)
router.Group(func(router chi.Router) {
router.Use(jwtauth.Verifier(s.tokenAuth))
router.Use(jwtauth.Verify(s.tokenAuth, jwtauth.TokenFromCookie))
router.Use(jwtAuthenticatorWeb)
router.Get(webLogoutPath, handleWebLogout)