From be8fabb9efe60a6215352b9d5ea48cda286a8d25 Mon Sep 17 00:00:00 2001 From: Anirudh Oppiliappan Date: Mon, 24 Mar 2025 19:44:07 +0200 Subject: [PATCH] knotserver: verify signature for a few other endpoints Thanks @dvjn.dev! --- knotserver/handler.go | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/knotserver/handler.go b/knotserver/handler.go index 6e7ea35c..d64fe27d 100644 --- a/knotserver/handler.go +++ b/knotserver/handler.go @@ -69,13 +69,17 @@ func Setup(ctx context.Context, c *config.Config, db *db.DB, e *rbac.Enforcer, j r.Route("/{did}", func(r chi.Router) { // Repo routes r.Route("/{name}", func(r chi.Router) { - r.Post("/collaborator/add", h.AddRepoCollaborator) + r.Route("/collaborator", func(r chi.Router) { + r.Use(h.VerifySignature) + r.Post("/add", h.AddRepoCollaborator) + }) r.Get("/", h.RepoIndex) r.Get("/info/refs", h.InfoRefs) r.Post("/git-upload-pack", h.UploadPack) r.Route("/merge", func(r chi.Router) { + r.With(h.VerifySignature) r.Post("/", h.Merge) r.Post("/check", h.MergeCheck) }) -- 2.51.2