IntenseWebs/boringproxy
3
0
Fork 0
mirror of https://github.com/boringproxy/boringproxy.git synced 2025-02-25 18:55:29 -06:00
Code Issues Packages Projects Releases Wiki Activity

Check client when creating client on api

Browse Source
This commit is contained in:
Anders Pitman 2022-02-16 12:58:26 -07:00
parent 6f12fc2633
commit 0b9a175ce9
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
api.go
View File

@ -175,8 +175,16 @@ func (a *Api) handleUsers(w http.ResponseWriter, r *http.Request) {
return
}
} else if len(parts) == 3 && parts[1] == "clients" {
ownerId := parts[0]
clientId := parts[2]
if tokenData.Client != "" && clientId != tokenData.Client {
w.WriteHeader(403)
io.WriteString(w, "Token cannot be used to modify this user's clients")
return
}
if r.Method == "PUT" {
err := a.SetClient(tokenData, r.Form, ownerId, clientId)
if err != nil {