Fix a /api/v1/webhook auth bypass
This commit is contained in:
+1
-1
@@ -404,7 +404,7 @@ namespace Tesses.YouTubeDownloader2025Companion
|
|||||||
var authHdr = auth.Split(' ', 2, StringSplitOptions.RemoveEmptyEntries);
|
var authHdr = auth.Split(' ', 2, StringSplitOptions.RemoveEmptyEntries);
|
||||||
var cfg = Config ?? new AuthConfig();
|
var cfg = Config ?? new AuthConfig();
|
||||||
|
|
||||||
if (string.IsNullOrWhiteSpace(cfg.Session) || (authHdr.Length == 2 && authHdr[0] == "TYTD" && cfg.SSOAppKey == authHdr[1]))
|
if (!string.IsNullOrWhiteSpace(cfg.Session) || (authHdr.Length == 2 && authHdr[0] == "TYTD" && cfg.SSOAppKey == authHdr[1]))
|
||||||
{
|
{
|
||||||
try
|
try
|
||||||
{
|
{
|
||||||
|
|||||||
Reference in New Issue
Block a user