Эх сурвалжийг харах

add exception handling if nextcloud-files app is reinstalled and third party app tries to access using an old token

David Luhmer 6 жил өмнө
parent
commit
f9bc65b6e1

+ 4 - 0
src/main/java/com/nextcloud/android/sso/InputStreamBinder.java

@@ -239,6 +239,10 @@ public class InputStreamBinder extends IInputStreamService.Stub {
     }
 
     private boolean validateToken(String hash, String token) {
+        if(hash.isEmpty() || !hash.contains("$")) {
+            throw new IllegalStateException(EXCEPTION_INVALID_TOKEN);
+        }
+
         String salt = hash.split("\\$")[1]; // TODO extract "$"
 
         String newHash = EncryptionUtils.generateSHA512(token, salt);