Namespace the storage in the registry to prevent leaking images if one acquires the image id.

This commit is contained in:
yackob03 2013-09-25 20:00:22 -04:00
parent deee70d53b
commit 44255421df
5 changed files with 116 additions and 93 deletions

View file

@ -34,11 +34,14 @@ def verify_user(username, password):
return None
def verify_token(code):
try:
return AccessToken.get(code=code)
except AccessToken.DoesNotExist:
return None
def verify_token(code, namespace_name, repository_name):
joined = AccessToken.select(AccessToken, Repository).join(Repository)
tokens = list(joined.where(AccessToken.code == code and
Repository.namespace == namespace_name and
Repository.name == repository_name))
if tokens:
return tokens[0]
return None
def change_password(user, new_password):