vw_small

Hardened fork of Vaultwarden (https://github.com/dani-garcia/vaultwarden) with fewer features.
git clone https://git.philomathiclife.com/repos/vw_small
Log | Files | Refs | README

commit ff19fb3426da8813b2a50532efa49a0c4a682777
parent 935f38692f612e78f0d331e4b95af333c3806bd2
Author: Daniel GarcĂ­a <dani-garcia@users.noreply.github.com>
Date:   Thu, 19 Mar 2020 18:11:47 +0100

Merge pull request #919 from BlackDex/issue-908

Fixed issue #908
Diffstat:
Msrc/auth.rs | 26++++++++++++++++++++++----
1 file changed, 22 insertions(+), 4 deletions(-)

diff --git a/src/auth.rs b/src/auth.rs @@ -307,6 +307,25 @@ pub struct OrgHeaders { pub org_user_type: UserOrgType, } +// org_id is usually the second param ("/organizations/<org_id>") +// But there are cases where it is located in a query value. +// First check the param, if this is not a valid uuid, we will try the query value. +fn get_org_id(request: &Request) -> Option<String> { + if let Some(Ok(org_id)) = request.get_param::<String>(1) { + if uuid::Uuid::parse_str(&org_id).is_ok() { + return Some(org_id); + } + } + + if let Some(Ok(org_id)) = request.get_query_value::<String>("organizationId") { + if uuid::Uuid::parse_str(&org_id).is_ok() { + return Some(org_id); + } + } + + None +} + impl<'a, 'r> FromRequest<'a, 'r> for OrgHeaders { type Error = &'static str; @@ -315,9 +334,8 @@ impl<'a, 'r> FromRequest<'a, 'r> for OrgHeaders { Outcome::Forward(_) => Outcome::Forward(()), Outcome::Failure(f) => Outcome::Failure(f), Outcome::Success(headers) => { - // org_id is expected to be the second param ("/organizations/<org_id>") - match request.get_param::<String>(1) { - Some(Ok(org_id)) => { + match get_org_id(request) { + Some(org_id) => { let conn = match request.guard::<DbConn>() { Outcome::Success(conn) => conn, _ => err_handler!("Error getting DB"), @@ -348,7 +366,7 @@ impl<'a, 'r> FromRequest<'a, 'r> for OrgHeaders { } }, }) - } + }, _ => err_handler!("Error getting the organization id"), } }