Skip to content
This repository was archived by the owner on Sep 2, 2022. It is now read-only.

Commit 62cfeaa

Browse files
committed
Hotfix authentication issue #4860.
1 parent 1d95a48 commit 62cfeaa

2 files changed

Lines changed: 1 addition & 2 deletions

File tree

server/images/prisma-image-shared/src/main/scala/com/prisma/image/SangriaHandlerImpl.scala

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -103,7 +103,7 @@ case class SangriaHandlerImpl(managementApiEnabled: Boolean)(
103103
private def verifyAuth[T](projectId: String, rawRequest: RawRequest)(fn: Project => Future[T]): Future[T] = {
104104
for {
105105
project <- apiDependencies.projectFetcher.fetch_!(projectId)
106-
authResult = apiDependencies.auth.verify(project.secrets, rawRequest.headers.get("Authorization"))
106+
authResult = apiDependencies.auth.verify(project.secrets, rawRequest.headers.get("authorization"))
107107
result <- if (authResult.isSuccess) fn(project) else Future.failed(InvalidToken())
108108
} yield result
109109
}

server/libs/auth/src/main/scala/com/prisma/auth/Auth.scala

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,6 @@ object AuthImpl extends Auth {
5353
def verify(secrets: Vector[String], authHeader: String): AuthResult = {
5454
val isValid = secrets.exists { secret =>
5555
val claims = Jwt.decodeRaw(token = authHeader.stripPrefix("Bearer "), key = secret, algorithms = algorithms, options = jwtOptions)
56-
// todo: also verify claims in accordance with https://github.com/graphcool/framework/issues/1365
5756
claims.isSuccess
5857
}
5958
if (isValid) AuthSuccess else AuthFailure

0 commit comments

Comments
 (0)