zaaarf/upub
1
0
Fork 0
forked from alemi/upub
Code Pull requests Activity

fix: can only update self

Browse source
This commit is contained in:
əlemi 2024-06-10 06:44:26 +02:00
parent 2d08511e05
commit 105b829e32
Signed by: alemi
GPG key ID: A4895B84D311642C
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
upub/core/src/traits/process.rs
View file

@ -259,6 +259,9 @@ pub async fn update(ctx: &crate::Context, activity: impl apb::Activity, tx: &Dat
match object_node.object_type()? { match object_node.object_type()? {
apb::ObjectType::Actor(_) => { apb::ObjectType::Actor(_) => {
if oid != actor_id {
return Err(ProcessorError::Unauthorized);
}
let internal_uid = crate::model::actor::Entity::ap_to_internal(&oid, tx) let internal_uid = crate::model::actor::Entity::ap_to_internal(&oid, tx)
.await? .await?
.ok_or(ProcessorError::Incomplete)?; .ok_or(ProcessorError::Incomplete)?;