vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Fix anonymous repository pulls

Browse source
This commit is contained in:
Jake Moshenko 2015-11-18 20:11:06 -05:00
parent 04f2688944
commit 39d799b1aa
1 changed files with 3 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
endpoints/v2/v2auth.py
View file

@ -78,11 +78,10 @@ def generate_registry_jwt():
if not REPOSITORY_NAME_REGEX.match(reponame): if not REPOSITORY_NAME_REGEX.match(reponame):
abort(400) abort(400)
if ('pull' in actions or 'push' in actions) and user is None and token is None:
# We are trying to perform a registry action without auth
abort(401)
if 'pull' in actions and 'push' in actions: if 'pull' in actions and 'push' in actions:
if user is None and token is None:
abort(401)
repo = model.repository.get_repository(namespace, reponame) repo = model.repository.get_repository(namespace, reponame)
if repo: if repo:
if not ModifyRepositoryPermission(namespace, reponame).can(): if not ModifyRepositoryPermission(namespace, reponame).can():