mirror of
https://github.com/norohind/FDEV-CAPI-Handler.git
synced 2026-10-25 01:06:03 +03:00
secret as header, not cookie
This commit is contained in:
1 file changed
+2
-2
@@ -11,9 +11,9 @@ logger.propagate = False
|
||||
|
||||
|
||||
def check_secret(req: falcon.request.Request, resp: falcon.response.Response, resource, params) -> None:
|
||||
cookies_secret = req.get_cookie_values('key')
|
||||
cookies_secret = req.headers.get('AUTH')
|
||||
|
||||
if cookies_secret is None or cookies_secret[0] != config.access_key:
|
||||
if cookies_secret != config.access_key:
|
||||
raise falcon.HTTPForbidden
|
||||
|
||||
|
||||
|
||||
Reference in new issue
Block a user