awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 10:27:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Try to fix the rotation for psql

Browse Source
This commit is contained in:
Fang-Pen Lin
2025-10-24 12:29:25 -07:00
parent c0d6204e13
commit 172eeebeff
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/ee/services/pam-resource/shared/sql/sql-resource-factory.ts
+7 -1
View File
@@ -115,7 +115,13 @@ const makeSqlConnection = (
}, },
rotateCredentials: async (currentCredentials) => { rotateCredentials: async (currentCredentials) => {
const newPassword = alphaNumericNanoId(32); const newPassword = alphaNumericNanoId(32);
await client.raw(`ALTER USER ?? WITH PASSWORD ?`, [currentCredentials.username, newPassword]); // Note: The generated random password is not really going to make SQL Injection possible.
// The reason we are not using parameters binding is that the "ALTER USER" syntax is DDL,
// parameters binding is not supported. But just in case if the this code got copied
// around and repurposed, let's just do some naive escaping regardless
await client.raw(`ALTER USER :username: WITH PASSWORD '${newPassword.replace(/'/g, "''")}'`, {
username: currentCredentials.username
});
return { username: currentCredentials.username, password: newPassword }; return { username: currentCredentials.username, password: newPassword };
}, },
close: () => client.destroy() close: () => client.destroy()