TrueCloudLab/frostfs-api-go
21
0
Fork 16
Code Issues 10 Pull requests 1 Projects Releases Activity Actions

[#323] pkg/client: Prevent corruption of parameterized session token

Browse source 
Create new `SessionTokenBody` instead of using one from the parameter in
order to prevent data corruption.

Signed-off-by: Leonard Lyubich <leonard@nspcc.ru>
This commit is contained in:
Leonard Lyubich 2021-07-06 11:18:25 +03:00 committed by Leonard Lyubich
parent ab60f3685b
commit 2f783dfad7
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
pkg/client/object.go
View file

@ -1302,7 +1302,6 @@ func (c *clientImpl) attachV2SessionToken(opts *callOptions, hdr *v2session.Requ
} }
token := new(v2session.SessionToken) token := new(v2session.SessionToken)
token.SetBody(opts.session.ToV2().GetBody())
opCtx := new(v2session.ObjectSessionContext) opCtx := new(v2session.ObjectSessionContext)
opCtx.SetAddress(info.addr) opCtx.SetAddress(info.addr)
@ -1313,7 +1312,9 @@ func (c *clientImpl) attachV2SessionToken(opts *callOptions, hdr *v2session.Requ
lt.SetNbf(info.nbf) lt.SetNbf(info.nbf)
lt.SetExp(info.exp) lt.SetExp(info.exp)
body := token.GetBody() body := new(v2session.SessionTokenBody)
body.SetID(opts.session.ID())
body.SetOwnerID(opts.session.OwnerID().ToV2())
body.SetSessionKey(opts.session.SessionKey()) body.SetSessionKey(opts.session.SessionKey())
body.SetContext(opCtx) body.SetContext(opCtx)
body.SetLifetime(lt) body.SetLifetime(lt)