Require auth for mint key endpoint (#7923)

The client combines the key from this endpoint to then encrypt secrets into browser storage.
This commit is contained in:
Anupam Mediratta
2026-08-03 21:54:25 +05:30
committed by GitHub
parent eb4ba56acb
commit 4f73664880
2 changed files with 15 additions and 1 deletions

View File

@@ -210,7 +210,7 @@ router.get("/manifest.json", async (req, res) => {
})
let mintKeyPromise: Promise<Buffer> | undefined
router.post("/mint-key", async (req, res) => {
router.post("/mint-key", ensureAuthenticated, async (req, res) => {
if (!mintKeyPromise) {
mintKeyPromise = new Promise(async (resolve) => {
const keyPath = path.join(req.args["user-data-dir"], "serve-web-key-half")