mirror of
https://github.com/jambonz/jambonz-api-server.git
synced 2025-12-19 05:47:46 +00:00
fixed how to detect obscured key (#524)
* fixed how to detect obscured key * wip * wip
This commit is contained in:
@@ -50,18 +50,15 @@ function isObscureKey(bucketCredentials) {
|
|||||||
service_key = '',
|
service_key = '',
|
||||||
connection_string = ''
|
connection_string = ''
|
||||||
} = bucketCredentials || {};
|
} = bucketCredentials || {};
|
||||||
let pattern;
|
// Pattern matches: 4-6 any characters followed by one or more X's
|
||||||
|
const pattern = /^.{4,6}X+$/;
|
||||||
switch (vendor) {
|
switch (vendor) {
|
||||||
case 'aws_s3':
|
case 'aws_s3':
|
||||||
case 's3_compatible':
|
case 's3_compatible':
|
||||||
pattern = /^([A-Za-z0-9]{4,6}X+$)/;
|
|
||||||
return pattern.test(secret_access_key);
|
return pattern.test(secret_access_key);
|
||||||
case 'azure':
|
case 'azure':
|
||||||
pattern = /^([A-Za-z0-9:]{4,6}X+$)/;
|
|
||||||
return pattern.test(connection_string);
|
return pattern.test(connection_string);
|
||||||
|
|
||||||
case 'google': {
|
case 'google': {
|
||||||
pattern = /^([A-Za-z0-9]{4,6}X+$)/;
|
|
||||||
let {private_key} = JSON.parse(service_key);
|
let {private_key} = JSON.parse(service_key);
|
||||||
const key_header = '-----BEGIN PRIVATE KEY-----\n';
|
const key_header = '-----BEGIN PRIVATE KEY-----\n';
|
||||||
private_key = private_key.slice(key_header.length, private_key.length);
|
private_key = private_key.slice(key_header.length, private_key.length);
|
||||||
|
|||||||
Reference in New Issue
Block a user