root/fusion
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(FN-4871): reject empty bearer/apiKey on inbound sync

Browse Source 
Fusion-Task-Id: FN-4871
Fusion-Task-Lineage: afa2af88-9c7d-4809-bf8f-2aa6cf79ce40
This commit is contained in:
Fusion (runfusion.ai)
2026-05-17 04:04:13 -07:00
committed by gsxdsm
parent 6aee8923db
commit 1ea7a93aa4
1 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
packages/dashboard/src/routes/register-settings-sync-inbound-routes.ts
View File

@@ -36,6 +36,14 @@ export const registerSettingsSyncInboundRoutes: ApiRouteRegistrar = (ctx) => {
await central.close();
throw new ApiError(401, "Local node not configured");
}
if (token.length === 0) {
await central.close();
throw new ApiError(401, "Missing or invalid Authorization header");
}
if (!localNode.apiKey) {
await central.close();
throw new ApiError(401, "Invalid apiKey");
}
if (localNode.apiKey !== token) {
await central.close();
throw new ApiError(401, "Invalid apiKey");
@@ -105,6 +113,14 @@ export const registerSettingsSyncInboundRoutes: ApiRouteRegistrar = (ctx) => {
await central.close();
throw new ApiError(401, "Local node not configured");
}
if (token.length === 0) {
await central.close();
throw new ApiError(401, "Missing or invalid Authorization header");
}
if (!localNode.apiKey) {
await central.close();
throw new ApiError(401, "Invalid apiKey");
}
if (localNode.apiKey !== token) {
await central.close();
throw new ApiError(401, "Invalid apiKey");
@@ -194,6 +210,14 @@ export const registerSettingsSyncInboundRoutes: ApiRouteRegistrar = (ctx) => {
await central.close();
throw new ApiError(401, "Local node not configured");
}
if (token.length === 0) {
await central.close();
throw new ApiError(401, "Missing or invalid Authorization header");
}
if (!localNode.apiKey) {
await central.close();
throw new ApiError(401, "Invalid apiKey");
}
if (localNode.apiKey !== token) {
await central.close();
throw new ApiError(401, "Invalid apiKey");