Explorar o código

add exception handling if nextcloud-files app is reinstalled and third party app tries to access using an old token

David Luhmer %!s(int64=6) %!d(string=hai) anos
pai
achega
f9bc65b6e1

+ 4 - 0
src/main/java/com/nextcloud/android/sso/InputStreamBinder.java

@@ -239,6 +239,10 @@ public class InputStreamBinder extends IInputStreamService.Stub {
     }
     }
 
 
     private boolean validateToken(String hash, String token) {
     private boolean validateToken(String hash, String token) {
+        if(hash.isEmpty() || !hash.contains("$")) {
+            throw new IllegalStateException(EXCEPTION_INVALID_TOKEN);
+        }
+
         String salt = hash.split("\\$")[1]; // TODO extract "$"
         String salt = hash.split("\\$")[1]; // TODO extract "$"
 
 
         String newHash = EncryptionUtils.generateSHA512(token, salt);
         String newHash = EncryptionUtils.generateSHA512(token, salt);