From 36d7fb2790774c53415c96f8c6955be42bad952f Mon Sep 17 00:00:00 2001 From: metamuffin Date: Mon, 11 Dec 2023 01:19:51 +0100 Subject: (partially) fix security problem with federated session --- server/src/federation.rs | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) (limited to 'server/src/federation.rs') diff --git a/server/src/federation.rs b/server/src/federation.rs index 38863e2..eb2a1ac 100644 --- a/server/src/federation.rs +++ b/server/src/federation.rs @@ -5,8 +5,8 @@ */ use anyhow::anyhow; use jellybase::CONF; -use jellyclient::{Instance, Session}; -use std::{collections::HashMap, sync::Arc, time::Duration}; +use jellyclient::{Instance, LoginDetails, Session}; +use std::{collections::HashMap, sync::Arc}; use tokio::sync::RwLock; pub struct Federation { @@ -46,11 +46,12 @@ impl Federation { let s = Arc::new( self.get_instance(host)? .to_owned() - .login( - username.to_owned(), - password.to_owned(), - Duration::from_secs(60 * 60 * 24 * 356), - ) + .login(LoginDetails { + username: username.to_owned(), + password: password.to_owned(), + expire: None, + drop_permissions: None, + }) .await?, ); w.insert(host.to_owned(), s.clone()); -- cgit v1.2.3-70-g09d2