lee/puter
1
0
Fork 0
mirror of https://github.com/HeyPuter/puter.git synced 2026-07-12 01:58:39 +00:00
Code Issues Actions 9 Packages Projects Releases Wiki Activity

fix: property validation on some permission endpoints

Browse Source
This commit is contained in:
KernelDeimos
2024-07-04 16:42:17 -04:00
parent dcbca2f829
commit 0855f2b36e
2 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/backend/src/routers/auth/grant-user-app.js
+6
View File
@@ -44,6 +44,12 @@ module.exports = eggspress('/auth/grant-user-app', {
throw APIError.create('field_missing', null, { key: 'app_uid' });
}
if ( ! req.body.permission ) {
throw APIError.create('field_missing', null, {
key: 'permission'
});
}
const token = await svc_permission.grant_user_app_permission(
actor, req.body.app_uid, req.body.permission,
req.body.extra || {}, req.body.meta || {}
packages/backend/src/routers/auth/grant-user-user.js
+6
View File
@@ -21,6 +21,12 @@ module.exports = eggspress('/auth/grant-user-user', {
throw APIError.create('field_missing', null, { key: 'target_username' });
}
if ( ! req.body.permission ) {
throw APIError.create('field_missing', null, {
key: 'permission'
});
}
await svc_permission.grant_user_user_permission(
actor, req.body.target_username, req.body.permission,
req.body.extra || {}, req.body.meta || {}