mirror of
https://github.com/Sneed-Group/Poodletooth-iLand
synced 2025-01-09 17:53:50 +00:00
tokens: add some token checks
This commit is contained in:
parent
398ede7a85
commit
1f21d7053f
1 changed files with 8 additions and 0 deletions
|
@ -241,7 +241,12 @@ class RemoteAccountDB:
|
|||
Token = BASE64(H + X)
|
||||
'''
|
||||
|
||||
cookie_check = executeHttpRequest('cookie', cookie=token)
|
||||
|
||||
try:
|
||||
check = json.loads(cookie_check)
|
||||
if check['success'] is not True:
|
||||
raise ValueError(check['error'])
|
||||
token = token.decode('base64')
|
||||
hash, token = token[:hashSize], token[hashSize:]
|
||||
correctHash = hashAlgo(token + accountServerSecret).digest()
|
||||
|
@ -256,6 +261,9 @@ class RemoteAccountDB:
|
|||
raise ValueError('Invalid hash.')
|
||||
|
||||
token = json.loads(token.decode('base64')[::-1].decode('rot13'))
|
||||
|
||||
if token['notAfter'] < int(time.time()):
|
||||
raise ValueError('Expired token.')
|
||||
except:
|
||||
resp = {'success': False}
|
||||
callback(resp)
|
||||
|
|
Loading…
Reference in a new issue