3diy
/
moonraker
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

authorization: raise a 401 error in the event that a JWT failes decoding 

Signed-off-by:  Eric Callahan <arksine.code@gmail.com>
This commit is contained in:
Eric Callahan 2021-05-28 18:26:32 -04:00
parent 2db727e40f
commit 082134b9a0
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
moonraker/components/authorization.py
View File

@ -421,8 +421,11 @@ class Authorization:
if public_key is None:
raise self.server.error(
f"Invalid JWT, user {username} not logged in", 401)
jwt.decode(token, [public_key], algorithms=['ES256'],
audience="Moonraker")
try:
jwt.decode(token, [public_key], algorithms=['ES256'],
audience="Moonraker")
except jwt.JWTError as e:
raise self.server.error(str(e), 401) from None
return user_info
def _load_private_key(self, secret: str) -> ec.EllipticCurvePrivateKey:
@ -433,7 +436,7 @@ class Authorization:
raise self.server.error(
"Error decoding private key, user data may"
" be corrupt", 500) from None
return key
return cast(ec.EllipticCurvePrivateKey, key)
def _prune_conn_handler(self) -> None:
cur_time = time.time()