Namespace the storage in the registry to prevent leaking images if one acquires the image id.
This commit is contained in:
parent
deee70d53b
commit
44255421df
5 changed files with 116 additions and 93 deletions
|
@ -34,11 +34,14 @@ def verify_user(username, password):
|
|||
return None
|
||||
|
||||
|
||||
def verify_token(code):
|
||||
try:
|
||||
return AccessToken.get(code=code)
|
||||
except AccessToken.DoesNotExist:
|
||||
return None
|
||||
def verify_token(code, namespace_name, repository_name):
|
||||
joined = AccessToken.select(AccessToken, Repository).join(Repository)
|
||||
tokens = list(joined.where(AccessToken.code == code and
|
||||
Repository.namespace == namespace_name and
|
||||
Repository.name == repository_name))
|
||||
if tokens:
|
||||
return tokens[0]
|
||||
return None
|
||||
|
||||
|
||||
def change_password(user, new_password):
|
||||
|
|
Reference in a new issue