Robosats/robosats
1
0
Fork 0
mirror of https://github.com/RoboSats/robosats.git synced 2025-07-18 08:43:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

middleware cleaning

Browse Source 
allow HTTP_AUTHORIZATION to be split just in 4
remove support for sending authorization with cookies
This commit is contained in:
jerryfletcher21
2025-06-26 18:02:29 +02:00
parent 0763b5812b
commit 623e5963de
1 changed files with 1 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
robosats/middleware.py
View File

@ -42,12 +42,7 @@ class SplitAuthorizationHeaderMiddleware(MiddlewareMixin):
auth_header = request.META.get("HTTP_AUTHORIZATION", "") auth_header = request.META.get("HTTP_AUTHORIZATION", "")
split_auth = auth_header.split(" | ") split_auth = auth_header.split(" | ")
if len(split_auth) == 3: if len(split_auth) == 4:
# Deprecated in favor of len 4
request.META["HTTP_AUTHORIZATION"] = split_auth[0]
request.META["PUBLIC_KEY"] = split_auth[1]
request.META["ENCRYPTED_PRIVATE_KEY"] = split_auth[2]
elif len(split_auth) == 4:
request.META["HTTP_AUTHORIZATION"] = split_auth[0] request.META["HTTP_AUTHORIZATION"] = split_auth[0]
request.META["PUBLIC_KEY"] = split_auth[1] request.META["PUBLIC_KEY"] = split_auth[1]
request.META["ENCRYPTED_PRIVATE_KEY"] = split_auth[2] request.META["ENCRYPTED_PRIVATE_KEY"] = split_auth[2]
@ -123,11 +118,6 @@ class RobotTokenSHA256AuthenticationMiddleWare:
).replace("Private ", "") ).replace("Private ", "")
nostr_pubkey = request.META.get("NOSTR_PUBKEY", "").replace("Nostr ", "") nostr_pubkey = request.META.get("NOSTR_PUBKEY", "").replace("Nostr ", "")
# Some legacy (pre-federation) clients will still send keys as cookies
if public_key == "" or encrypted_private_key == "":
public_key = request.COOKIES.get("public_key")
encrypted_private_key = request.COOKIES.get("encrypted_private_key", "")
if not public_key or not encrypted_private_key or not nostr_pubkey: if not public_key or not encrypted_private_key or not nostr_pubkey:
return JsonResponse( return JsonResponse(
{ {