NuKVM/xen-orchestra
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat(xo-server/token.create): minimum duration is now one minute

Browse Source 
This change also handles negative or zero invalid durations.
This commit is contained in:
Julien Fontanet
2022-06-15 11:26:32 +02:00
parent 4501902331
commit 4f50f90213
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
packages/xo-server/src/xo-mixins/authentication.mjs
View File

@@ -175,7 +175,9 @@ export default class {
let duration = this._defaultTokenValidity let duration = this._defaultTokenValidity
if (expiresIn !== undefined) { if (expiresIn !== undefined) {
duration = parseDuration(expiresIn) duration = parseDuration(expiresIn)
if (duration > this._maxTokenValidity) { if (duration <= 60e3) {
throw new Error('invalid expiresIn duration: ' + expiresIn)
} else if (duration > this._maxTokenValidity) {
throw new Error('too high expiresIn duration: ' + expiresIn) throw new Error('too high expiresIn duration: ' + expiresIn)
} }
} }