github-mirror/framework
2
0
Fork 0
mirror of https://github.com/flarum/framework.git synced 2025-05-31 04:25:49 +08:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Always grant master API keys sudo mode

Browse Source
This commit is contained in:
Toby Zerner
2015-12-30 15:26:07 +10:30
parent 5e476fae16
commit 1cac48f90a
3 changed files with 5 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/Http/Middleware/AuthenticateWithHeader.php
View File

@ -10,6 +10,7 @@
namespace Flarum\Http\Middleware;
use DateTime;
use Flarum\Api\ApiKey;
use Flarum\Core\User;
use Flarum\Http\AccessToken;
@ -36,8 +37,10 @@ class AuthenticateWithHeader implements MiddlewareInterface
if (isset($parts[0]) && starts_with($parts[0], $this->prefix)) {
$id = substr($parts[0], strlen($this->prefix));
if (isset($parts[1]) && ApiKey::valid($id)) {
if (isset($parts[1]) && ApiKey::find($id)) {
$actor = $this->getUser($parts[1]);
$request->getAttribute('session')->set('sudo_expiry', new DateTime);
} elseif ($token = AccessToken::find($id)) {
$token->touch();