IntenseWebs/pgadmin4
3
0
Fork 0
mirror of https://github.com/pgadmin-org/pgadmin4.git synced 2025-02-25 18:55:31 -06:00
Code Issues Packages Projects Releases Wiki Activity

Authenticate the runtime to the server. Fixes #2228

Browse Source
This commit is contained in:
Dave Page
2017-03-06 14:53:49 +00:00
parent 6d6a3753ee
commit 6696b3c316
5 changed files with 34 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
web/pgadmin/__init__.py
View File

@@ -414,7 +414,13 @@ def create_app(app_name=config.APP_NAME):
@app.before_request
def before_request():
"""Login the default user if running in desktop mode"""
if config.SERVER_MODE is False:
if app.PGADMIN_RUNTIME == True:
if (
(not 'key' in request.args or request.args['key'] != app.PGADMIN_KEY) and
request.cookies.get('PGADMIN_KEY') != app.PGADMIN_KEY
):
abort(401)
user = user_datastore.get_user(config.DESKTOP_USER)
# Throw an error if we failed to find the desktop user, to give
@@ -429,6 +435,13 @@ def create_app(app_name=config.APP_NAME):
login_user(user)
@app.after_request
def after_request(response):
if 'key' in request.args:
response.set_cookie('PGADMIN_KEY', value=request.args['key'])
return response
##########################################################################
# Minify output
##########################################################################