Ailur-Archives
/
hectabit-oauth2
Archived
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Quote properly

This commit is contained in:
Tracker-Friendly 2024-04-20 16:13:15 +01:00
parent 0fbe995c12
commit c936bacfcc
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
main
View File

@ -12,6 +12,7 @@ from hypercorn.config import Config
from hypercorn.asyncio import serve from hypercorn.asyncio import serve
from werkzeug.security import generate_password_hash, check_password_hash from werkzeug.security import generate_password_hash, check_password_hash
from quart import Quart, render_template, request, url_for, flash, redirect, session, make_response, send_from_directory, stream_with_context, Response, request from quart import Quart, render_template, request, url_for, flash, redirect, session, make_response, send_from_directory, stream_with_context, Response, request
from urllib.parse import quote
# Parse configuration file, and check if anything is wrong with it # Parse configuration file, and check if anything is wrong with it
if not os.path.exists("config.ini"): if not os.path.exists("config.ini"):
@ -274,11 +275,11 @@ async def apiauthenticate():
appidcheck = str(conn.execute("SELECT appId FROM oauth WHERE appId = ?", (str(appId),)).fetchone()[0]) appidcheck = str(conn.execute("SELECT appId FROM oauth WHERE appId = ?", (str(appId),)).fetchone()[0])
if not str(appidcheck) == str(appId): if not str(appidcheck) == str(appId):
return {}, 401 return "AppID is invalid", 401
rdircheck = str(conn.execute("SELECT rdiruri FROM oauth WHERE appId = ?", (str(appId),)).fetchone()[0]) rdircheck = str(conn.execute("SELECT rdiruri FROM oauth WHERE appId = ?", (str(appId),)).fetchone()[0])
if not str(rdircheck) == str(redirect_uri): if not str(rdircheck) == str(quote(redirect_uri)):
return {}, 401 return str(str(quote(redirect_uri)) + " is not " + str(rdircheck)), 401
datatemplate = { datatemplate = {
"sub": user["username"], "sub": user["username"],
@ -424,7 +425,7 @@ async def apicreateauth():
user = get_user(userCookie["id"]) user = get_user(userCookie["id"])
conn.execute("INSERT INTO oauth (appId, creator, secret, rdiruri) VALUES (?, ?, ?, ?)", conn.execute("INSERT INTO oauth (appId, creator, secret, rdiruri) VALUES (?, ?, ?, ?)",
(str(appId),int(user["id"]),str(secret),str(rdiruri))) (str(appId),int(user["id"]),str(secret),str(quote(rdiruri))))
conn.commit() conn.commit()
conn.close() conn.close()
secretkey = { secretkey = {