4nk/ihm_client
5
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases Wiki Activity

[bug] validateToken was bypassed

Browse Source
This commit is contained in:
Sosthene 2025-06-30 19:49:06 +02:00
parent ed4fa732f7
commit f5fae245e2
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
src/router.ts
View File

@ -249,7 +249,7 @@ export async function registerAllListeners() {
try { try {
const { accessToken } = event.data; const { accessToken } = event.data;
if (!accessToken || await !tokenService.validateToken(accessToken, event.origin)) { if (!accessToken || !(await tokenService.validateToken(accessToken, event.origin))) {
throw new Error('Invalid or expired session token'); throw new Error('Invalid or expired session token');
} }
@ -286,7 +286,7 @@ export async function registerAllListeners() {
const { accessToken } = event.data; const { accessToken } = event.data;
// Validate the session token // Validate the session token
if (!accessToken || await !tokenService.validateToken(accessToken, event.origin)) { if (!accessToken || !(await tokenService.validateToken(accessToken, event.origin))) {
throw new Error('Invalid or expired session token'); throw new Error('Invalid or expired session token');
} }
@ -322,7 +322,7 @@ export async function registerAllListeners() {
try { try {
const { processId, stateId, accessToken } = event.data; const { processId, stateId, accessToken } = event.data;
if (!accessToken || await !tokenService.validateToken(accessToken, event.origin)) { if (!accessToken || !(await tokenService.validateToken(accessToken, event.origin))) {
throw new Error('Invalid or expired session token'); throw new Error('Invalid or expired session token');
} }
@ -433,7 +433,7 @@ export async function registerAllListeners() {
try { try {
const { accessToken } = event.data; const { accessToken } = event.data;
if (!accessToken || !tokenService.validateToken(accessToken, event.origin)) { if (!accessToken || !(await tokenService.validateToken(accessToken, event.origin))) {
throw new Error('Invalid or expired session token'); throw new Error('Invalid or expired session token');
} }
@ -465,7 +465,7 @@ export async function registerAllListeners() {
try { try {
const { processData, privateFields, roles, accessToken } = event.data; const { processData, privateFields, roles, accessToken } = event.data;
if (!accessToken || await !tokenService.validateToken(accessToken, event.origin)) { if (!accessToken || !(await tokenService.validateToken(accessToken, event.origin))) {
throw new Error('Invalid or expired session token'); throw new Error('Invalid or expired session token');
} }
@ -512,7 +512,7 @@ export async function registerAllListeners() {
try { try {
const { processId, stateId, accessToken } = event.data; const { processId, stateId, accessToken } = event.data;
if (!accessToken || await !tokenService.validateToken(accessToken, event.origin)) { if (!accessToken || !(await tokenService.validateToken(accessToken, event.origin))) {
throw new Error('Invalid or expired session token'); throw new Error('Invalid or expired session token');
} }
@ -548,7 +548,7 @@ export async function registerAllListeners() {
try { try {
const { processId, stateId, accessToken } = event.data; const { processId, stateId, accessToken } = event.data;
if (!accessToken || await !tokenService.validateToken(accessToken, event.origin)) { if (!accessToken || !(await tokenService.validateToken(accessToken, event.origin))) {
throw new Error('Invalid or expired session token'); throw new Error('Invalid or expired session token');
} }
@ -582,7 +582,7 @@ export async function registerAllListeners() {
// roles can be empty meaning that roles from the last commited state are kept // roles can be empty meaning that roles from the last commited state are kept
const { processId, newData, privateFields, roles, accessToken } = event.data; const { processId, newData, privateFields, roles, accessToken } = event.data;
if (!accessToken || await !tokenService.validateToken(accessToken, event.origin)) { if (!accessToken || !(await tokenService.validateToken(accessToken, event.origin))) {
throw new Error('Invalid or expired session token'); throw new Error('Invalid or expired session token');
} }
@ -671,7 +671,7 @@ export async function registerAllListeners() {
try { try {
const { accessToken, encodedData } = event.data; const { accessToken, encodedData } = event.data;
if (!accessToken || !tokenService.validateToken(accessToken, event.origin)) { if (!accessToken || !(await tokenService.validateToken(accessToken, event.origin))) {
throw new Error('Invalid or expired session token'); throw new Error('Invalid or expired session token');
} }