awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 13:27:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

comments

Browse Source
This commit is contained in:
Fang-Pen Lin
2025-11-07 09:20:30 -08:00
parent 0d883af30b
commit 4ab3e2cb97
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/ee/services/pki-acme/pki-acme-service.ts
+3 -1
View File
@@ -158,9 +158,11 @@ export const pkiAcmeServiceFactory = ({
const { protectedHeader: rawProtectedHeader, payload: rawPayload } = result; const { protectedHeader: rawProtectedHeader, payload: rawPayload } = result;
try { try {
const protectedHeader = ProtectedHeaderSchema.parse(rawProtectedHeader); const protectedHeader = ProtectedHeaderSchema.parse(rawProtectedHeader);
// Validate the URL
if (new URL(protectedHeader.url).href !== url.href) { if (new URL(protectedHeader.url).href !== url.href) {
throw new AcmeUnauthorizedError({ detail: "URL mismatch in the protected header" }); throw new AcmeUnauthorizedError({ detail: "URL mismatch in the protected header" });
} }
// Consume the nonce
if (!protectedHeader.nonce) { if (!protectedHeader.nonce) {
throw new AcmeMalformedError({ detail: "Nonce is required in the protected header" }); throw new AcmeMalformedError({ detail: "Nonce is required in the protected header" });
} }
@@ -169,7 +171,7 @@ export const pkiAcmeServiceFactory = ({
throw new AcmeBadNonceError({ detail: "Invalid nonce" }); throw new AcmeBadNonceError({ detail: "Invalid nonce" });
} }
// TODO: consume the nonce here // Parse the payload
const decoder = new TextDecoder(); const decoder = new TextDecoder();
const textPayload = decoder.decode(rawPayload); const textPayload = decoder.decode(rawPayload);
const payload = schema ? schema.parse(JSON.parse(textPayload)) : textPayload; const payload = schema ? schema.parse(JSON.parse(textPayload)) : textPayload;