dandri/livekit
1
0
Fork 0
mirror of https://github.com/livekit/livekit.git synced 2026-08-16 06:49:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove auth token from log/being sent back to client on invalid token… (#4756)

Browse Source 
* Remove auth token from log/being sent back to client on invalid token error

* actually remove API key also
This commit is contained in:
Raja Subramanian
2026-08-14 11:51:14 +05:30
committed by GitHub
parent 7d612428f9
commit df20578a78
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/service/auth.go
+3 -2
View File
@@ -17,6 +17,7 @@ package service
import (
"context"
"errors"
"fmt"
"net/http"
"strings"
"time"
@@ -88,13 +89,13 @@ func (m *APIKeyAuthMiddleware) ServeHTTP(w http.ResponseWriter, r *http.Request,
secret := m.provider.GetSecret(v.APIKey())
if secret == "" {
HandleError(w, r, http.StatusUnauthorized, errors.New("invalid API key: "+v.APIKey()))
HandleError(w, r, http.StatusUnauthorized, ErrInvalidAPIKey)
return
}
claims, grants, err := v.Verify(secret)
if err != nil {
HandleError(w, r, http.StatusUnauthorized, errors.New("invalid token: "+authToken+", error: "+err.Error()))
HandleError(w, r, http.StatusUnauthorized, fmt.Errorf("%w: %s", ErrInvalidAuthorizationToken, err.Error()))
return
}