From 3b81cdb16ee6240de8a680a8969ef6b6fc6264ce Mon Sep 17 00:00:00 2001 From: x032205 Date: Thu, 15 May 2025 01:12:33 -0400 Subject: [PATCH 1/3] fix oci machine identity --- .../src/services/identity-oci-auth/identity-oci-auth-service.ts | 2 -- 1 file changed, 2 deletions(-) diff --git a/backend/src/services/identity-oci-auth/identity-oci-auth-service.ts b/backend/src/services/identity-oci-auth/identity-oci-auth-service.ts index f3df97330..2a23115a7 100644 --- a/backend/src/services/identity-oci-auth/identity-oci-auth-service.ts +++ b/backend/src/services/identity-oci-auth/identity-oci-auth-service.ts @@ -59,8 +59,6 @@ export const identityOciAuthServiceFactory = ({ const identityMembershipOrg = await identityOrgMembershipDAL.findOne({ identityId: identityOciAuth.identityId }); - await blockLocalAndPrivateIpAddresses(headers.host); - // Validate OCI host format if (!headers.host || !new RE2("^identity\\.([a-z]{2}-[a-z]+-[1-9])\\.oraclecloud\\.com$").test(headers.host)) { throw new BadRequestError({ From 1e11702c589b639cb133bcc0234d68f2330b09d5 Mon Sep 17 00:00:00 2001 From: x032205 Date: Thu, 15 May 2025 01:17:38 -0400 Subject: [PATCH 2/3] remove unused import --- .../src/services/identity-oci-auth/identity-oci-auth-service.ts | 1 - 1 file changed, 1 deletion(-) diff --git a/backend/src/services/identity-oci-auth/identity-oci-auth-service.ts b/backend/src/services/identity-oci-auth/identity-oci-auth-service.ts index 2a23115a7..32613f045 100644 --- a/backend/src/services/identity-oci-auth/identity-oci-auth-service.ts +++ b/backend/src/services/identity-oci-auth/identity-oci-auth-service.ts @@ -17,7 +17,6 @@ import { request } from "@app/lib/config/request"; import { BadRequestError, NotFoundError, PermissionBoundaryError, UnauthorizedError } from "@app/lib/errors"; import { extractIPDetails, isValidIpOrCidr } from "@app/lib/ip"; import { logger } from "@app/lib/logger"; -import { blockLocalAndPrivateIpAddresses } from "@app/lib/validator"; import { ActorType, AuthTokenType } from "../auth/auth-type"; import { TIdentityOrgDALFactory } from "../identity/identity-org-dal"; From e1f3eaf1a0cee15e4a05f35b313c7cfb52028163 Mon Sep 17 00:00:00 2001 From: x032205 Date: Thu, 15 May 2025 11:41:00 -0400 Subject: [PATCH 3/3] Comment for regex --- .../src/services/identity-oci-auth/identity-oci-auth-service.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/src/services/identity-oci-auth/identity-oci-auth-service.ts b/backend/src/services/identity-oci-auth/identity-oci-auth-service.ts index 32613f045..00e3884bd 100644 --- a/backend/src/services/identity-oci-auth/identity-oci-auth-service.ts +++ b/backend/src/services/identity-oci-auth/identity-oci-auth-service.ts @@ -58,7 +58,7 @@ export const identityOciAuthServiceFactory = ({ const identityMembershipOrg = await identityOrgMembershipDAL.findOne({ identityId: identityOciAuth.identityId }); - // Validate OCI host format + // Validate OCI host format. Ensures that the host is in "identity..oraclecloud.com" format. if (!headers.host || !new RE2("^identity\\.([a-z]{2}-[a-z]+-[1-9])\\.oraclecloud\\.com$").test(headers.host)) { throw new BadRequestError({ message: "Invalid OCI host format. Expected format: identity..oraclecloud.com"