Lanmikeman/Launcher
1
1
Fork 0
mirror of https://github.com/GravitLauncher/Launcher synced 2025-01-21 23:04:45 +03:00
Code Issues Projects Releases Packages Wiki Activity

Дополнительные проверки безопасности

Browse source
This commit is contained in:
Gravit 2018-11-06 19:07:15 +07:00
parent d65a60e61d
commit 72701e0775
No known key found for this signature in database
GPG key ID: 061981E1E85D3216
2 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
LaunchServer/src/main/java/ru/gravit/launchserver/response/auth/AuthResponse.java
View file

@ -71,6 +71,10 @@ public void reply() throws Exception {
AuthProvider.authError(server.config.authRejectString);
return;
}
if(!clientData.checkSign)
{
throw new AuthException("You must using checkLauncher");
}
result = provider.auth(login, password, ip);
if (!VerifyHelper.isValidUsername(result.username)) {
AuthProvider.authError(String.format("Illegal result: '%s'", result.username));

2
LaunchServer/src/main/java/ru/gravit/launchserver/response/update/UpdateResponse.java
View file

@ -38,7 +38,7 @@ public void reply() throws IOException {
return;
}
Client clientData = server.sessionManager.getClient(session);
if(!clientData.isAuth || clientData.type != Client.Type.USER) { requestError("Assess denied"); return;}
if(!clientData.isAuth || clientData.type != Client.Type.USER || clientData.profile == null) { requestError("Assess denied"); return;}
for(SignedObjectHolder<ClientProfile> p : server.getProfiles())
{
ClientProfile profile = p.object;