Feat/webapp verified sso main (#20494)

This commit is contained in:
Xiyuan Chen 2025-06-09 17:19:53 +09:00 • committed by GitHub
commit 0720bc7408
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
13 changed files with 504 additions and 75 deletions

View file

@ -57,6 +57,9 @@ def load_user_from_request(request_from_flask_login):
raise Unauthorized("Invalid Authorization token.")
decoded = PassportService().verify(auth_token)
user_id = decoded.get("user_id")
source = decoded.get("token_source")
if source:
raise Unauthorized("Invalid Authorization token.")
if not user_id:
raise Unauthorized("Invalid Authorization token.")