doomtube/beeta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fixes lol
All checks were successful
Build and Push / build-all (push) Successful in 9m0s
Details

Browse source
This commit is contained in:
doomtube 2026-01-09 21:58:57 -05:00
parent c65967acd6
commit cba741a94f
4 changed files with 80 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

3
backend/src/services/AuthService.cpp
View file

@ -739,6 +739,7 @@ std::string AuthService::generateToken(const UserInfo& user) {
.set_payload_claim("is_moderator", jwt::claim(std::to_string(user.isModerator)))
.set_payload_claim("is_streamer", jwt::claim(std::to_string(user.isStreamer)))
.set_payload_claim("is_restreamer", jwt::claim(std::to_string(user.isRestreamer)))
.set_payload_claim("is_texter", jwt::claim(std::to_string(user.isTexter)))
.set_payload_claim("is_disabled", jwt::claim(std::to_string(user.isDisabled))) // SECURITY FIX #26
.set_payload_claim("token_version", jwt::claim(std::to_string(user.tokenVersion))) // SECURITY FIX #10
.set_payload_claim("color_code", jwt::claim(
@ -775,6 +776,8 @@ bool AuthService::validateToken(const std::string& token, UserInfo& userInfo) {
decoded.get_payload_claim("is_streamer").as_string() == "1" : false;
userInfo.isRestreamer = decoded.has_payload_claim("is_restreamer") ?
decoded.get_payload_claim("is_restreamer").as_string() == "1" : false;
userInfo.isTexter = decoded.has_payload_claim("is_texter") ?
decoded.get_payload_claim("is_texter").as_string() == "1" : false;
// SECURITY FIX #26: Extract disabled status
userInfo.isDisabled = decoded.has_payload_claim("is_disabled") ?