From 5ae18a691dbae11eebd15687019375473db57e7f Mon Sep 17 00:00:00 2001 From: Sid <58144379+sidwebworks@users.noreply.github.com> Date: Thu, 17 Jul 2025 17:59:49 +0530 Subject: [PATCH] fix: verify response type (#4182) Co-authored-by: sidwebworks --- .../app-connection/1password/1password-connection-fns.ts | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/backend/src/services/app-connection/1password/1password-connection-fns.ts b/backend/src/services/app-connection/1password/1password-connection-fns.ts index d8a18576f..44f3757b2 100644 --- a/backend/src/services/app-connection/1password/1password-connection-fns.ts +++ b/backend/src/services/app-connection/1password/1password-connection-fns.ts @@ -31,12 +31,16 @@ export const validateOnePassConnectionCredentials = async (config: TOnePassConne const { apiToken } = config.credentials; try { - await request.get(`${instanceUrl}/v1/vaults`, { + const res = await request.get(`${instanceUrl}/v1/vaults`, { headers: { Authorization: `Bearer ${apiToken}`, Accept: "application/json" } }); + + if (!Array.isArray(res.data)) { + throw new AxiosError("Invalid response from 1Password API"); + } } catch (error: unknown) { if (error instanceof AxiosError) { throw new BadRequestError({