awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-08 09:27:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix the compare logic, isSubsetOf seems like not available

Browse Source
This commit is contained in:
Fang-Pen Lin
2025-11-13 09:21:38 -08:00
parent d70fa8f406
commit 0593c71d43
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/ee/services/pki-acme/pki-acme-service.ts
+4 -5
View File
@@ -684,12 +684,11 @@ export const pkiAcmeServiceFactory = ({
.map((san) => san.value.toLowerCase()) .map((san) => san.value.toLowerCase())
.concat([certificateRequest.commonName!.toLowerCase()]) .concat([certificateRequest.commonName!.toLowerCase()])
); );
const expectedIdentifierValues = new Set(
orderWithAuthorizations.authorizations.map((auth) => auth.identifierValue.toLowerCase())
);
if ( if (
csrIdentifierValues.size != expectedIdentifierValues.size || csrIdentifierValues.size !== orderWithAuthorizations.authorizations.length ||
!csrIdentifierValues.isSubsetOf(expectedIdentifierValues) !orderWithAuthorizations.authorizations.every((auth) =>
csrIdentifierValues.has(auth.identifierValue.toLowerCase())
)
) { ) {
throw new AcmeBadCSRError({ detail: "Invalid CSR: Common name + SANs mismatch with order identifiers" }); throw new AcmeBadCSRError({ detail: "Invalid CSR: Common name + SANs mismatch with order identifiers" });
} }