olcxjas-softworks/LarpixServer
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

vulnerabilities, vulnerabilities, vulnerabilities...
All checks were successful
Server Build / publish (push) Successful in 30s
Details
Voice Build / publish (push) Successful in 26s
Details

Browse source
This commit is contained in:
olcxja 2026-05-29 08:19:12 +02:00
commit 8dafeb06a9
4 changed files with 110 additions and 49 deletions
Download patch file Download diff file Expand all files Collapse all files

18
LarpixServer/Account/Requests.cs
View file

@ -31,7 +31,7 @@ public class Requests
return;
}
string id = Utils.GetIdFromUsernameWD(idQuery.ToString());
string id = Utils.GetValidIdOrZero(idQuery.ToString());
string password = await Utils.GetPassword(id);
secret = await Utils.NonceDecryptBody(id, password, secret);
string auth = await Utils.Auth(id, password, secret);
@ -292,7 +292,7 @@ public class Requests
return;
}
string id = Utils.GetIdFromUsernameWD(idQuery.ToString());
string id = Utils.GetValidIdOrZero(idQuery.ToString());
string password = await Utils.GetPassword(id);
secret = await Utils.NonceDecryptBody(id, password, secret);
string auth = await Utils.Auth(id, password, secret);
@ -353,7 +353,7 @@ public class Requests
{
return;
}
id = Utils.GetIdFromUsernameWD(id.ToString());
id = Utils.GetValidIdOrZero(id.ToString());
await context.Response.WriteAsync(await Utils.NameFromId(id) + $":{DOMAIN}");
return;
@ -367,7 +367,7 @@ public class Requests
return;
}
string id = Utils.GetIdFromUsernameWD(idQuery.ToString());
string id = Utils.GetValidIdOrZero(idQuery.ToString());
string plainPass = await Utils.GetPassword(id);
foreach (var kvp in nonceHolder) //clearowanie nieuzytych nonce
{
@ -403,7 +403,7 @@ public class Requests
return;
}
string id = Utils.GetIdFromUsernameWD(idQuery.ToString());
string id = Utils.GetValidIdOrZero(idQuery.ToString());
string body = await LoadBody(bodyReader);
string password = await Utils.GetPassword(id);
string newPass = await Utils.NonceDecryptBody(id, password, body, false);
@ -451,7 +451,7 @@ public class Requests
return;
}
string id = Utils.GetIdFromUsernameWD(idQuery.ToString());
string id = Utils.GetValidIdOrZero(idQuery.ToString());
string body = await LoadBody(bodyReader);
string password = await Utils.GetPassword(id);
@ -503,7 +503,7 @@ public class Requests
{
return;
}
string id = Utils.GetIdFromUsernameWD(idQuery.ToString());
string id = Utils.GetValidIdOrZero(idQuery.ToString());
string keysRaw = await Utils.GetUserKeys(id);
if (string.IsNullOrEmpty(keysRaw))
{
@ -533,7 +533,7 @@ public class Requests
{
return;
}
string id = Utils.GetIdFromUsernameWD(idQuery.ToString());
string id = Utils.GetValidIdOrZero(idQuery.ToString());
byte[] entryByte = await Utils.GetUserPublicStorageEntry(id, entry);
@ -557,7 +557,7 @@ public class Requests
return;
}
string id = Utils.GetIdFromUsernameWD(idQuery.ToString());
string id = Utils.GetValidIdOrZero(idQuery.ToString());
string body = await LoadBody(bodyReader);
string password = await Utils.GetPassword(id);
body = await Utils.NonceDecryptBody(id, password, body, false);