Browse Source

add exception handling if nextcloud-files app is reinstalled and third party app tries to access using an old token

David Luhmer 6 years ago
parent
commit
f9bc65b6e1
1 changed files with 4 additions and 0 deletions
  1. 4 0
      src/main/java/com/nextcloud/android/sso/InputStreamBinder.java

+ 4 - 0
src/main/java/com/nextcloud/android/sso/InputStreamBinder.java

@@ -239,6 +239,10 @@ public class InputStreamBinder extends IInputStreamService.Stub {
     }
 
     private boolean validateToken(String hash, String token) {
+        if(hash.isEmpty() || !hash.contains("$")) {
+            throw new IllegalStateException(EXCEPTION_INVALID_TOKEN);
+        }
+
         String salt = hash.split("\\$")[1]; // TODO extract "$"
 
         String newHash = EncryptionUtils.generateSHA512(token, salt);