xinyin025/LangBot
1
0
Fork 0
mirror of https://github.com/langbot-app/LangBot.git synced 2026-10-23 17:05:28 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2680 from langbot-app/fix/auth-invalid-json-contract-20261017

Browse Source 
fix(auth): reject malformed credential payloads before authentication
This commit is contained in:
huanghuoguoguo
2026-10-17 20:11:01 +08:00
committed by GitHub
parent 0b0201a3f5 569dd07024
commit 98cc2ec2d6
2 changed files with 36 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/langbot/pkg/api/http/controller/groups/user.py
+5 -1
View File
@@ -111,7 +111,11 @@ class UserRouterGroup(group.RouterGroup):
async def _() -> str:
if getattr(getattr(self.ap, 'deployment', None), 'mode', 'oss') == 'cloud':
return self.http_status(403, 'password_login_disabled', 'Password login is disabled on LangBot Cloud')
json_data = await quart.request.json
json_data = await quart.request.get_json(silent=True)
if not isinstance(json_data, dict) or not all(
isinstance(json_data.get(field), str) for field in ('user', 'password')
):
return self.http_status(400, -1, 'Invalid request parameters')
user_email = json_data['user']
password = json_data['password']