hansjone/oclaw
1
0
Fork 0
mirror of https://github.com/hansjone/oclaw.git synced 2026-10-18 07:23:20 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(uds-auth): isolate trusted Host calls from browser identity
Some checks are pending
ci / test (push) Waiting to run
Details
ci / test-postgresql (push) Waiting to run
Details

Browse source
This commit is contained in:
oliver 2026-10-11 17:03:40 +08:00
parent 3ba4461566
commit fa4d5d6d97
7 changed files with 83 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
uds-auth/lib/index.js
View file

@ -21,6 +21,7 @@ import {
LOCAL_ADMIN_BOX_ENV,
} from './local-admin.js'
import { SessionBridgeStore } from './session-bridge.js'
import { runAsHost } from './context.js'
const __dirname = dirname(fileURLToPath(import.meta.url))
const require = createRequire(import.meta.url)
@ -1267,6 +1268,7 @@ async function initServices(ctx, config) {
}
const udsAuth = {
runAsHost,
async resolveRequestIdentity(req) {
const identity = await resolveIdentity(req)
if (!identity?.empNo) return null