go/pocketbase
1
0
Fork 0
mirror of https://github.com/pocketbase/pocketbase.git synced 2025-03-23 07:06:18 +02:00
Code Issues Releases Activity

directly resolve to null for auth check with missing RequestInfo.Auth field

Browse Source
This commit is contained in:
Gani Georgiev 2025-01-01 17:19:30 +02:00
parent c8b29edf9d
commit 73f1b223ff
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
core/record_field_resolver.go
View File

@ -215,7 +215,7 @@ func (r *RecordFieldResolver) resolveStaticRequestField(path ...string) (*search
resultVal = val resultVal = val
} }
placeholder := "f" + security.PseudorandomString(6) placeholder := "f" + security.PseudorandomString(8)
if modifier == lowerModifier { if modifier == lowerModifier {
return &search.ResolverResult{ return &search.ResolverResult{

8
core/record_field_resolver_runner.go
View File

@ -197,6 +197,10 @@ func (r *runner) processCollectionField() (*search.ResolverResult, error) {
} }
func (r *runner) processRequestAuthField() (*search.ResolverResult, error) { func (r *runner) processRequestAuthField() (*search.ResolverResult, error) {
if r.resolver.requestInfo == nil || r.resolver.requestInfo.Auth == nil || r.resolver.requestInfo.Auth.Collection() == nil {
return &search.ResolverResult{Identifier: "NULL"}, nil
}
// plain auth field // plain auth field
// --- // ---
if _, ok := plainRequestAuthFields[r.fieldName]; ok { if _, ok := plainRequestAuthFields[r.fieldName]; ok {
@ -205,10 +209,6 @@ func (r *runner) processRequestAuthField() (*search.ResolverResult, error) {
// resolve the auth collection field // resolve the auth collection field
// --- // ---
if r.resolver.requestInfo == nil || r.resolver.requestInfo.Auth == nil || r.resolver.requestInfo.Auth.Collection() == nil {
return &search.ResolverResult{Identifier: "NULL"}, nil
}
collection := r.resolver.requestInfo.Auth.Collection() collection := r.resolver.requestInfo.Auth.Collection()
r.activeCollectionName = collection.Name r.activeCollectionName = collection.Name