mirror of
https://github.com/turt2live/matrix-dimension.git
synced 2024-09-04 16:12:11 +00:00
Merge branch 'travis/security'
This commit is contained in:
commit
60da1fc4db
@ -53,6 +53,11 @@ export class ScalarService {
|
|||||||
const mxClient = new MatrixOpenIdClient(<OpenId>request);
|
const mxClient = new MatrixOpenIdClient(<OpenId>request);
|
||||||
const mxUserId = await mxClient.getUserId();
|
const mxUserId = await mxClient.getUserId();
|
||||||
|
|
||||||
|
if (!mxUserId.endsWith(":" + request.matrix_server_name)) {
|
||||||
|
LogService.warn("ScalarService", `OpenID subject '${mxUserId}' does not belong to the homeserver '${request.matrix_server_name}'`);
|
||||||
|
throw new ApiError(401, "Invalid token");
|
||||||
|
}
|
||||||
|
|
||||||
const user = await User.findByPrimary(mxUserId);
|
const user = await User.findByPrimary(mxUserId);
|
||||||
if (!user) {
|
if (!user) {
|
||||||
// There's a small chance we'll get a validation error because of:
|
// There's a small chance we'll get a validation error because of:
|
||||||
|
Loading…
Reference in New Issue
Block a user