From 2109fd29a6df63dc51f6ace2c5dcc2d297c12b21 Mon Sep 17 00:00:00 2001 From: Qiu Jian Date: Wed, 25 Sep 2019 16:30:10 +0800 Subject: [PATCH] fix: keystone panic on invalid auth token --- pkg/keystone/tokens/handlers.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/keystone/tokens/handlers.go b/pkg/keystone/tokens/handlers.go index 520a5267dc..b218529636 100644 --- a/pkg/keystone/tokens/handlers.go +++ b/pkg/keystone/tokens/handlers.go @@ -179,7 +179,7 @@ func verifyTokensV3(ctx context.Context, w http.ResponseWriter, r *http.Request) func verifyCommon(ctx context.Context, w http.ResponseWriter, tokenStr string) (*SAuthToken, error) { adminToken := policy.FetchUserCredential(ctx) - if !adminToken.IsAllow(rbacutils.ScopeSystem, api.SERVICE_TYPE, "tokens", "perform", "auth") { + if adminToken == nil || !adminToken.IsAllow(rbacutils.ScopeSystem, api.SERVICE_TYPE, "tokens", "perform", "auth") { return nil, httperrors.NewForbiddenError("not allow to auth") } token := SAuthToken{}