mirror of
https://github.com/Tencent/WeKnora.git
synced 2026-09-24 16:29:01 +08:00
wizardchen
a17a2250ed
Gate wiki GET routes and initialization config reads with KBAccessRead, and bind async task progress endpoints to the caller tenant via task ID parsing. Closes cross-tenant read paths reported in GHSA-ph8f-4qwx-89rr and related initialization/progress leaks.
28 lines
857 B
Go
28 lines
857 B
Go
package handler
|
|
|
|
import (
|
|
"context"
|
|
|
|
apperrors "github.com/Tencent/WeKnora/internal/errors"
|
|
"github.com/Tencent/WeKnora/internal/types"
|
|
"github.com/Tencent/WeKnora/internal/utils"
|
|
)
|
|
|
|
// requireTaskProgressTenant ensures async task progress endpoints only
|
|
// return data for tasks created under the caller's tenant. Cross-tenant
|
|
// probes are hidden as not-found to avoid confirming task existence.
|
|
func requireTaskProgressTenant(ctx context.Context, taskID string) error {
|
|
taskTenantID, err := utils.TaskTenantID(taskID)
|
|
if err != nil {
|
|
return apperrors.NewBadRequestError("invalid task ID")
|
|
}
|
|
callerTenantID, ok := types.TenantIDFromContext(ctx)
|
|
if !ok || callerTenantID == 0 {
|
|
return apperrors.NewUnauthorizedError("Unauthorized")
|
|
}
|
|
if taskTenantID != callerTenantID {
|
|
return apperrors.NewNotFoundError("task not found")
|
|
}
|
|
return nil
|
|
}
|